5ab10f2da78b3a0bb5b2b0f4c13c746d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ab10f2da78b3a0bb5b2b0f4c13c746d
Size

352KB
MD5

5ab10f2da78b3a0bb5b2b0f4c13c746d
SHA1

218099bc517ae44c1018ed272be34239b8f21530
SHA256

79814c010a8059b12e22f75d32ccbb30e27845136df04a305a63e2ff5cca804a
SHA512

fa82d8e4573e5a8f1f5c749379f8ac4654f6d59a1b78fcc1aebc80ab9b7d4587335be9c74a045e445b768c5d251b09495f54af681857a4ede46fd70a32f79616
SSDEEP

6144:BtQyV+uX6w+VRgbw6imfBtS7MUgF6vtA7ync3ZNm0+pntTsP/XZIwa/C:kyUuJbB5tNFX7B3JusP/pIJC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ab10f2da78b3a0bb5b2b0f4c13c746d

Files

5ab10f2da78b3a0bb5b2b0f4c13c746d
.exe windows:4 windows x86 arch:x86

87cc7b5d9cdccff9e4862ee9f958fe6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
LoadLibraryExA
FindClose
GetACP
GlobalUnlock
VirtualProtectEx
GetModuleHandleA
IsBadStringPtrA
GetStdHandle
GetSystemTime
FreeEnvironmentStringsA
OpenMutexA
IsBadReadPtr
ResumeThread
lstrlenA
LocalFree
CreateEventA
GlobalLock
FreeConsole

user32

GetDlgItemTextA
GetComboBoxInfo
GetSubMenu
IsIconic
GetMessageA
IsMenu
CheckMenuItem
EndDialog
SetFocus
CreateWindowExA
DialogBoxParamA
GetMessageA
ClipCursor
MessageBoxA

msasn1

ASN1BEREncNull
ASN1BERDecCheck
ASN1DecAlloc
ASN1BEREncOpenType
ASN1BERDecBool

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ