5bb7ceb390b02011c3319beaeb243be5

General

Target

5bb7ceb390b02011c3319beaeb243be5
Size

176KB
MD5

5bb7ceb390b02011c3319beaeb243be5
SHA1

f7b6d2bf62c8d392ec7d630ac0e4146f9de96bdc
SHA256

3a3684212aa86b3114972c118eb89637a65e3387517e98859e3d1e2d93d06a60
SHA512

b98a2bbd70796c80f20bcb0fe1bc13721b5ab5383b5697b9f5c7ca2b9a28c8dd6aa374df6cc72bf87378a8e10bd5832b71a4e32c6afee2c619a492ad3b3681ca
SSDEEP

3072:scUMEdfPwdoJZe9Qt5WV9+K6C04VFOXp2OyECJHvLZQY07bglGhtrEM5tPVFiFG:slDfPlZe9vVD6uIkOy59QY07bglUrEED

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb7ceb390b02011c3319beaeb243be5

Files

5bb7ceb390b02011c3319beaeb243be5
.exe windows:5 windows x86 arch:x86

6d6bb9f191b426c35c3bd7207ad4ff41

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetObjectA
CreateRectRgn
GetObjectW
SetPaletteEntries
CreateDIBitmap
SetViewportOrgEx

kernel32

SearchPathA
GetProcAddress
CreateFileMappingA
GetSystemDefaultLCID
FindFirstChangeNotificationW
VerifyVersionInfoW
SetHandleCount
MapViewOfFile
lstrcmpA
CreateEventA
GetModuleHandleW
lstrlenA
FindNextFileA
GetTickCount

user32

SetSysColors
SendInput
MapVirtualKeyExW
GetSubMenu
GetWindow
LoadBitmapW
ShowWindow
ShowWindowAsync
LoadCursorW
GetDlgItemTextW
GetScrollRange
GetClassLongW
GetForegroundWindow

comdlg32

GetOpenFileNameA
CommDlgExtendedError

Exports

Exports

?oSNgYMlhuqG@@YGII@Z
?xyNbdgtbrXcjZ@@YGJKJ@Z
?dKAhvLrnqtKbounpCjmucX@@YGIPAHPAI@Z
?kjKRTtejEhhb@@YG_NNPAI@Z
?OPHquxVeOQfioDr@@YGPAXPAIJ@Z

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 245B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d6bb9f191b426c35c3bd7207ad4ff41

Headers

File Characteristics

Imports

gdi32

kernel32

user32

comdlg32

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 19KB

.data Size: 2KB - Virtual size: 82KB

.crt Size: 4KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 245B

.rsrc Size: 146KB - Virtual size: 146KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 19KB

.data
Size: 2KB - Virtual size: 82KB

.crt
Size: 4KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 245B

.rsrc
Size: 146KB - Virtual size: 146KB

.reloc
Size: 2KB - Virtual size: 2KB