5bc68c6b8ce3afa22e67e2bc43b242fd | Triage

Sharing

General

Target

5bc68c6b8ce3afa22e67e2bc43b242fd
Size

107KB
MD5

5bc68c6b8ce3afa22e67e2bc43b242fd
SHA1

4cd8f6e1fdb3b2ff6bdb42f0c74f4ac780869d7e
SHA256

cb6498cb56a096081d878f72d94cc025faca1dbacd31f0c9d84fc1b6b4e176bb
SHA512

6c40d68fbb782a83675dd252424399de471e06ce50d738d8db547198612150fa6e257ef055edd5640a50ca0a60a7672f7828d5f9914900d58287366a2e4c8195
SSDEEP

1536:5L/eV0oohJlHH05ndYcW60T6hcZvRdf7Wwt8dPi9qH1HWux6JBPEY+41cJ:8Va/H0LY/Rmhudf7hAZH12ux6/8O+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bc68c6b8ce3afa22e67e2bc43b242fd

Files

5bc68c6b8ce3afa22e67e2bc43b242fd
.exe windows:4 windows x86 arch:x86

452e807d179221a69a9f39536182a2fb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRChrIA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE