5b1e098bdd6b478737efe4e613bb9594 | Triage

Sharing

General

Target

5b1e098bdd6b478737efe4e613bb9594
Size

113KB
MD5

5b1e098bdd6b478737efe4e613bb9594
SHA1

b1199381fece709c16b3891a5bbf233214ff55e2
SHA256

fc4253fe50d2568ddc852b8dff564c4116b619e847cb45346aff55f5716969b7
SHA512

19febcee062cf160f278367f9c9b73282cc8e58121c9a7a4059c2df340626ceefddc605d144805f8af108e4047d8c69c434e899e0021e5d7be465f8b654f112d
SSDEEP

1536:sjKJfhGPOAvgwDi+8PUHQubVS71SOBKbxN3eZzl42aeHLGyJMxd:E0fhGPZvg0gUHdbVISdxr8GyJ4d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1e098bdd6b478737efe4e613bb9594

Files

5b1e098bdd6b478737efe4e613bb9594
.exe windows:4 windows x86 arch:x86

062aa184c43fc1c38838d2d1b270a568

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTime
GetModuleHandleA
GetCommandLineA
VirtualAlloc
ExitProcess

user32

GetWindowRect
LoadCursorA
GetSystemMetrics
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow
GetClientRect
GetDC
ReleaseDC
GetSysColor
GetMessageA
DispatchMessageA
DefWindowProcA
CreateWindowExA
LoadIconA

gdi32

DeleteObject
LineTo
MoveToEx
SelectObject
CreatePen

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 750B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE