5b021aed6d018adea2f6c7c20796ea70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b021aed6d018adea2f6c7c20796ea70
Size

415KB
MD5

5b021aed6d018adea2f6c7c20796ea70
SHA1

285d332092a8feae9a6e20c41b32f458f6953daa
SHA256

e5a96803563fcd35b1d729ae71260afd39bbb687cc3eb2ca792cd8b0bedad85e
SHA512

7c726cf5e45de95af01e67ec2d9d1d66bdf57f6321a846b05e78459d1ff00d6f4aa6468772c30464d9cc23f102c8c485ebc35af0a9cf8a52e69b9e38e94af8d7
SSDEEP

6144:L6b2I7dBJY+l8EAnddMJfnDnDYiktjAg2SDj2uqLUITtjtz:L6qIprYLsr0iktjrpDSFJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b021aed6d018adea2f6c7c20796ea70

Files

5b021aed6d018adea2f6c7c20796ea70
.exe windows:4 windows x86 arch:x86

28a1de5f216f12c63345fde5de0b00cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RaiseException
GetStdHandle
SetErrorMode
Sleep
GetLastError
GlobalAddAtomA
CloseHandle
VirtualProtect
GlobalAddAtomA
GetSystemDirectoryA
LoadLibraryExA
HeapCreate
GetLogicalDrives
GetLocaleInfoA
GetFileAttributesExA
EnterCriticalSection
LockResource
GlobalFree
GetCommandLineA
InterlockedExchange
GetACP

user32

GetClassNameA
EndPaint
FillRect
GetParent
wsprintfA
IsIconic
GetWindowTextA
ReleaseDC
FlashWindowEx
GetWindow
ValidateRect
FrameRect
GetCursorPos
ShowWindow
GetFocus
SetForegroundWindow
BeginPaint
GetActiveWindow
DrawTextA

httpapi

HttpCreateHttpHandle
HttpTerminate
HttpAddFragmentToCache
HttpInitialize
HttpAddUrl

winhttp

WinHttpOpen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 696KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ