5c1763ad4fd52d497c6046bf724a5519 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c1763ad4fd52d497c6046bf724a5519
Size

17KB
MD5

5c1763ad4fd52d497c6046bf724a5519
SHA1

eda520fe8181ad7b8c4d5204f3c1a42b8dfe54d5
SHA256

a78d879f5f53e2066fd40914dfa72232249a6f9c853cc855593f0d98bcb04118
SHA512

1b40b2ea892d93885e2d847a9eaa0dce7c2ea05b330c6e94d8c84bbd7ecadffeb3cc05f5f4d37fd9157f0f9bcaa855c885c58c29b990fa142afb12ea57c7f42e
SSDEEP

192:YBoiCLbRdGm1YJIwvCfAYoIy5LKu9Wkf3wHZfrpxDGTUxUOilPAN0DgHh:3iad7uOwOAXI2t9WkvwH9HG4xA2s8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c1763ad4fd52d497c6046bf724a5519

Files

5c1763ad4fd52d497c6046bf724a5519
.exe windows:4 windows x86 arch:x86

59791e12dcc1986bcb83a5fbe52b0b50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
MultiByteToWideChar
HeapCreate
GetLastError
InitAtomTable
GetTimeFormatA
CloseHandle
SizeofResource
GlobalUnlock
EnterCriticalSection
VirtualProtect
SetErrorMode
GlobalAddAtomA
LockResource
GetPriorityClass
RaiseException
SetConsoleCP
LoadLibraryExA
GetACP
GlobalDeleteAtom
GlobalFree

user32

AnyPopup
GetClassNameA
GetFocus
ReleaseDC
GetClassInfoExA
IsIconic
ShowWindow
BeginPaint
CloseWindow
GetForegroundWindow
GetParent
ValidateRect
GetWindow
GetDC
DrawEdge
GetActiveWindow
EndPaint
GetWindowTextLengthA
GetWindowTextA

mprapi

MprAdminUserRead
MprAdminUserWrite
MprAdminUserOpen
MprAdminUserClose
MprAdminUserGetInfo

mapi32

MAPILogonEx

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ