5c0d0dab5211247f64905a58f7defb74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c0d0dab5211247f64905a58f7defb74
Size

178KB
MD5

5c0d0dab5211247f64905a58f7defb74
SHA1

2b75ebc7144c45f2bbc823022e5701aaacdbda7c
SHA256

d61a3d288913928660947d4b0eb3b4a72529ef6b4ac15e83551bce4762e5d8d1
SHA512

b7532a3fcff9cc8e40d929fb5232ef4496f087578ad1268861bb4036618fb079acbc890472fda57bb728634df2a60feb38614f6a45db9b18a5f31554c1467d93
SSDEEP

3072:jUTwb9GfvkdPmyaDMjNKpWqnjwsYIBji06AQpqpcI7jEvtxXD:jUTYGfvkAyaQjcpL3YIfQpqV7av

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c0d0dab5211247f64905a58f7defb74

Files

5c0d0dab5211247f64905a58f7defb74
.exe windows:4 windows x86 arch:x86

5408a9050eb956da67b32ed174f8ab66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

StrStrA
StrChrIA
ShellExecuteA
SHGetSpecialFolderPathA

kernel32

lstrcpyA
lstrcatA
WriteFile
Sleep
SizeofResource
LockResource
LoadResource
CloseHandle
CopyFileA
CreateFileA
ExitProcess
FindResourceA
GetModuleHandleA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 1024B - Virtual size: 838B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE