5b4e21c9be6bef3e21d1b1d512bfbf5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b4e21c9be6bef3e21d1b1d512bfbf5f
Size

16KB
MD5

5b4e21c9be6bef3e21d1b1d512bfbf5f
SHA1

8215a79964d0888be758df037411af0911f83e15
SHA256

34f3286d7a1bf8c626a7cbaaf1cf185242242d6c8adbcac60536cab7c91761c7
SHA512

71434428d8737e50c4c4985dde9d700acbaa0cfae96a7e401a1c08dd5addb7f1590d7fd8cab9d10bd3dadda4b2d50370a6d499b516852d9023e68ebb50f0e0cb
SSDEEP

384:NF7WFcqXMKhuYUqUtxFHfcp9X1Rma51Xg963h:NsFcMMaRhkwF1Mq1Xgo3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b4e21c9be6bef3e21d1b1d512bfbf5f

Files

5b4e21c9be6bef3e21d1b1d512bfbf5f
.exe windows:4 windows x86 arch:x86

e742d506521669f763b1d95d4b3341c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
GetTimeFormatW
SetEnvironmentVariableA
GetEnvironmentVariableA
CreateMailslotW
WritePrivateProfileStructW
GetPrivateProfileSectionA
GetConsoleAliasesW
GlobalFindAtomW
EnumDateFormatsA
GetStringTypeExW
DefineDosDeviceA

user32

CreateDesktopA
EnumDesktopsW
DdeQueryStringA
CallWindowProcA
GetPropA
CreateWindowExA
DialogBoxIndirectParamW
SetPropA

gdi32

GetObjectA
EnumFontsA
CreateDCA
AddFontResourceExW
GetCharacterPlacementA

Sections

.fasm
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 9KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data?
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.icode
Size: 1024B - Virtual size: 814B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ