5b1de238f5c8860bc35f41e0e2ad2b52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b1de238f5c8860bc35f41e0e2ad2b52
Size

69KB
MD5

5b1de238f5c8860bc35f41e0e2ad2b52
SHA1

5d9933d661960e5c48f3a6b86ba2c48fc9f0cd45
SHA256

723c6658e92ecce994d15a1098519c5de1230b2ab76b12b00ee3c91d506be68b
SHA512

434bf18e86baca9184aa47cd8ee35d5c535eee49209e53538b0ff34078cb4d047d7bd093290e191be0627f018a18502983aa043a3df312f2b17bd0fc4d436002
SSDEEP

1536:Uihw8fsM0DMIvZtB63BzXHpe2oEdy8x/fxk:UiDfr0DMS7B6ZXHpfy8x6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1de238f5c8860bc35f41e0e2ad2b52

Files

5b1de238f5c8860bc35f41e0e2ad2b52
.exe windows:4 windows x86 arch:x86

9ea478a3b73d2516d669e2d8f2eeb9ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcmp
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

Sections

.text
Size: 47KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE