5a1ad64cde6acb3f38afb16ac9f5fd2a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a1ad64cde6acb3f38afb16ac9f5fd2a
Size

20KB
MD5

5a1ad64cde6acb3f38afb16ac9f5fd2a
SHA1

e57f9d6515a7c38d69555f524733dcb7d932f543
SHA256

6b0e332112730ce52ff3385a68fca04f30a473790151623e813aa53b6e8340a3
SHA512

ea4c2a398322cd8b8a53cac806b016f68b8f10f4e1d2dc5bfddc7ec6d0c69c16622ca945df05aa29668913f20f603051460d9a3b209793af5534b66ad8714b0a
SSDEEP

384:2amjFa/L2ymsPOtbqhA34SwEzrq3hEGd1F6zZ97k3li:2RjFaCym8NhwmEzrEF6zDw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1ad64cde6acb3f38afb16ac9f5fd2a

Files

5a1ad64cde6acb3f38afb16ac9f5fd2a
.exe windows:1 windows x86 arch:x86

18892466b756bec0476cab51c2aa3d21

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

Control_RunDLLW
SHGetDesktopFolder
RealShellExecuteExW
SHFileOperation
SHGetMalloc
StrChrIW
SHEmptyRecycleBinA

gdi32

GetDeviceCaps
PtInRegion
FloodFill
PathToRegion
GdiStartDocEMF
RectInRegion
PolyPatBlt
GetTextColor
GetPixelFormat

user32

MessageBoxExA
CreateMenu
FlashWindow
ChangeMenuW

Sections

��t
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE