5b811633b0153277b05f9e702e4cfdd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b811633b0153277b05f9e702e4cfdd7
Size

351KB
MD5

5b811633b0153277b05f9e702e4cfdd7
SHA1

72ff699fb166c51f4f1362ac0e160216e7b10655
SHA256

9f41d6a6c15a99083c72d4849a787720a0a449cba9227f8fdf4d45214842b8de
SHA512

7cdfd33005daa6b26781307c147926a7b2a870f0987b24e65ea7285e79de7079a17c969578a476c0c0e1b66cfa980ac212444280fa4df18618f6138112fb11ed
SSDEEP

6144:hq+PZTDlGsitFRWmEd5G5W4Wz2usuQxaVzJD8qzCD7O6J6dI1M+wxE6e0yC:hq+BK8jCW4+6uQc9JBM756dI1ITefC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b811633b0153277b05f9e702e4cfdd7

Files

5b811633b0153277b05f9e702e4cfdd7
.exe windows:4 windows x86 arch:x86

fa2538a4f3ed22ca3d224e6f5170ca91

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
FindFirstFileW
CopyFileW
EnumCalendarInfoExA
FindNextFileW
SetFileAttributesW
MoveFileW
FindClose
SetLastError
OpenProcess
UnregisterWaitEx
RegisterWaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExW
FormatMessageW
GetTickCount
CreateEventW
CreateThread
GetCurrentThreadId
OutputDebugStringA
GetCurrentProcessId
ResetEvent
SetEvent
GetFileAttributesExW
ReleaseMutex
WaitForMultipleObjects
CreateMutexW
CloseHandle
WaitForSingleObject
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
LocalFree
GetLastError
InterlockedDecrement
InterlockedIncrement
InterlockedExchange

oleaut32

VARIANT_UserFree
SafeArrayCreateEx
VarI8FromR8
SafeArrayGetRecordInfo
SafeArraySetIID
SetErrorInfo
SysAllocString
SysAllocStringLen

msvfw32

ICInfo

Sections

.text
Size: 217KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE