5b399546cccb8d8679d6d50396989fbd | Triage

Sharing

General

Target

5b399546cccb8d8679d6d50396989fbd
Size

183KB
MD5

5b399546cccb8d8679d6d50396989fbd
SHA1

b5ef4938e9c2541623db9dfaba133d9c64ca950e
SHA256

919b29d9682bfacffb4f120a8c74cdcebaad1e6aa58e81562d6ec1afe27d368c
SHA512

97b3eb6cb2978c4fd8c8f44eadadcf6c1a78eb4580b3e4aa8f7ab2f33fc54a1e86772c7eba55a8da63da4a7ff0a91e61706e3bca3f355d6e5737ae9013f677f9
SSDEEP

1536:Yr4yvHKgD1wzFj80Gs629pcCPpCDCwcCYPzRqgaRP:ex2bAmJCQNVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b399546cccb8d8679d6d50396989fbd

Files

5b399546cccb8d8679d6d50396989fbd
.exe windows:4 windows x86 arch:x86

ffd77e094c67b9166f5820abb34fe648

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

user32

ShowWindow
UpdateWindow
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadMenuA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
GetClientRect
EndPaint
DrawTextA
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
wsprintfA
TranslateMessage

kernel32

CreateFileA
ReadFile
GetVersionExA
GetModuleHandleA
GetDriveTypeA
GetCommandLineA
ExitProcess
DeviceIoControl
CloseHandle

gdi32

BitBlt
SelectObject
DeleteObject
DeleteDC
CreateFontA
CreateCompatibleDC

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 998B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ