5b875ac6a6d109ded470287afe6d8997

General

Target

5b875ac6a6d109ded470287afe6d8997
Size

90KB
MD5

5b875ac6a6d109ded470287afe6d8997
SHA1

f8de9d7c014d68add41d7317129ad16ab0af162f
SHA256

7cc347f1cbe4c95d5083c97f4c8494ed0afe27288c283e9d0e66aedf96b19f9d
SHA512

9875a36f61aa7c30b4af105298580369849ea9a41c30f9e1fed51575a5ba5c5de6d332d72d8df6a411564fd752478182bc1eff5b7e7c7b19943b384e2f223400
SSDEEP

1536:FpRWkpHImWRUUm65uk7s0ejNyJx1E6MANsej99BsKaUO050YjYxV6BqrxoqD6IlZ:/RWkpHIlRUi5uWsPNAGefBB35EmqrxHb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b875ac6a6d109ded470287afe6d8997

Files

5b875ac6a6d109ded470287afe6d8997
.exe windows:1 windows x86 arch:x86

b426b70cf753fd9b966231e38a618fb3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
BackupSeek
CloseHandle
FindAtomA
GetCPInfo
GetCommandLineA
GetCurrencyFormatA
GetDiskFreeSpaceA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetTickCount
GetVersion
GlobalLock
LoadLibraryA
SearchPathA
SleepEx
SuspendThread
SwitchToFiber
SwitchToThread
UnmapViewOfFile
VirtualAlloc
VirtualFree
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

gdi32

AddFontResourceA
CloseFigure
CreateBrushIndirect
DeleteObject
GetDeviceCaps
GetNearestColor
SetTextColor

advapi32

GetPrivateObjectSecurity
RegCloseKey
RegDeleteKeyA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegGetKeySecurity
RegLoadKeyA
RegOpenKeyA
RegQueryValueA
RegQueryValueExA
RevertToSelf

user32

AppendMenuA
BeginPaint
ClipCursor
EqualRect
GetMenu
GetMessagePos
GetTopWindow
InvalidateRect
IsCharUpperA
LoadCursorA
MonitorFromRect
PostQuitMessage
SetCaretPos
ShowCaret
SwitchDesktop
TrackMouseEvent
TrackPopupMenuEx
UpdateWindow

Sections

.data
Size: 83KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b426b70cf753fd9b966231e38a618fb3

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

user32

Sections

.data Size: 83KB - Virtual size: 82KB

.code Size: 2KB - Virtual size: 1KB

.reloc Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.data
Size: 83KB - Virtual size: 82KB

.code
Size: 2KB - Virtual size: 1KB

.reloc
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB