5a61f5392e76e905e2f702ca0a080d3d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a61f5392e76e905e2f702ca0a080d3d
Size

442KB
MD5

5a61f5392e76e905e2f702ca0a080d3d
SHA1

7b15852d74c74150f2112c0485a875153e9ffc5d
SHA256

40b950d5a67d535e9dfaa5b2161cc44f2e1caa08908b70a73e942284064e13e2
SHA512

4da62a3af0e3b62abf609bf2a602fd130901f40624a1ef5c275d2592f1d6de035d9f989945e8ef3bc4ada381e197bd6289803198bbaf4afee4f7d66e4236be41
SSDEEP

6144:vBkEYcHPTAoF+Vr8X70N5rxP+7C2wskiO0T5adpI2aXLdZV9wjzdOJXP6CS6rx9m:v7PI8X70Xx2C0kL0T5b2m8z8JCClvMT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a61f5392e76e905e2f702ca0a080d3d

Files

5a61f5392e76e905e2f702ca0a080d3d
.exe windows:4 windows x86 arch:x86

a70457eb493dcb277d1f47240011d2d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

cfgmgr32

CM_Get_DevNode_Status

Sections

CODE
Size: 431KB - Virtual size: 784KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE