5bf66b454f905398b30abf2493e7870a | Triage

Sharing

General

Target

5bf66b454f905398b30abf2493e7870a
Size

1.3MB
MD5

5bf66b454f905398b30abf2493e7870a
SHA1

b05e8c5fbc7fb2370f5dbf48cc6cde1276fba5c4
SHA256

483ac9ced905988e5b80699a74ea0c0c66e5decd6aabd0854fb074a713c2a7af
SHA512

06cff4a4274588f03f768fae0eb9ce0d07e398555080717a2de1891f8b131f29e0002a4111b150c0716f16f949c33aa8117d4c02ac2b97b29737e9fe83fe659d
SSDEEP

6144:nNJenYLTua7LNi6XdVvfchivnxPxx/PcUA+ibKdC2DHYRfkypZpukzIq5V1us:nvgoNii3cIxPxZPb3igC2Mx3p59cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf66b454f905398b30abf2493e7870a

Files

5bf66b454f905398b30abf2493e7870a
.exe windows:4 windows x86 arch:x86

c575ea696f31f3e4e8b47f370a8d0dab

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
GetCurrentProcess
LoadLibraryA
CloseHandle
CreateFileA
LCMapStringA
ExitProcess

user32

SetWindowLongA
CreateWindowExA
wsprintfA
CloseWindow
CharLowerBuffA

advapi32

RegEnumKeyA
RegQueryValueA
RegSetValueA
RegCloseKey
RegDeleteValueA
RegOpenKeyA
RegDeleteKeyA
RegEnumValueA
RegCreateKeyA

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ