5aedde97da9d3fa08dca444d7bc1b53f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aedde97da9d3fa08dca444d7bc1b53f
Size

71KB
MD5

5aedde97da9d3fa08dca444d7bc1b53f
SHA1

19ffd618c3c441825ae81981253e892291e682b6
SHA256

690d775d861a2690b381bf34d570f4ca63f61a4481a4402fcd57a147322e9d12
SHA512

e61eb710cf0db6b18c2e3940afc2e778c53a20ee91a3ea3efb4633d7eeeaf9ade0e57fc679b954d6ec0f31356dfec61aa1e3e1c2f5900b51bdd5cc74119c8862
SSDEEP

1536:oH7KHAHJ0y5nAXGSq2FhzXCLEWOaG/BlA1RO39oggLZAXxy:z8h5C3WoWjR86XqXE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aedde97da9d3fa08dca444d7bc1b53f

Files

5aedde97da9d3fa08dca444d7bc1b53f
.exe windows:4 windows x86 arch:x86

9ea478a3b73d2516d669e2d8f2eeb9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

Sections

.text
Size: 46KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE