5bf9f32af126272e27c2433842f13169 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bf9f32af126272e27c2433842f13169
Size

10KB
MD5

5bf9f32af126272e27c2433842f13169
SHA1

cf771ae8afd82f343f9928eb326562aa9e939918
SHA256

33eaba5d93b81352f535a40f268341ca63b0820a468d27270a301a3c84fa7001
SHA512

294e8e512bbfce7a89090fc15b061ca4fb96d951074ccd77a05f67323f4573aadb36fb8d75baa969e17e21a2c7f6ab8b17ddb83ca1a9ae308208c3ec37fd08df
SSDEEP

192:m3mN4efLt9BlabGZcojGtNK6QsJDhaWP+BIXFuS0fxeP3TmBB:m26QL36XojsNK6QsJDvLudfxuqBB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf9f32af126272e27c2433842f13169

Files

5bf9f32af126272e27c2433842f13169
.exe windows:4 windows x86 arch:x86

3f9fb66c4515665b0ab7d2ef9f87b099

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

CopyIcon
CharLowerW
DrawTextW
ShowWindowAsync
DragObject
GetAltTabInfo

kernel32

GetLastError
VirtualProtect
GlobalAddAtomW
WriteConsoleOutputCharacterA
HeapReAlloc
PostQueuedCompletionStatus
GetConsoleAliasesLengthA

gdi32

TextOutA
RestoreDC
GdiEntry12
SetMetaFileBitsEx
SetBrushAttributes

Sections

.text
Size: 3KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE