b5e2a9be2eff6cbe7db7d7bccccd3c84 | Triage

Sharing

General

Target

b5e2a9be2eff6cbe7db7d7bccccd3c84
Size

48KB
MD5

b5e2a9be2eff6cbe7db7d7bccccd3c84
SHA1

c453cce5629127d93d9892b61c131aa8240028f7
SHA256

77576b3a821ce18aaa2f54c23e37ad08c71091e58736f9d6981451888781c497
SHA512

02192130d5dabf28c56e3d1539f24eb6efe447d806d4e528bc6b13a5dcbe143484195a14c16c8bf9cfee79825ed0f363618a6a5a5d5d1643a79750f76604a131
SSDEEP

1536:kIuPdqIchWBSNpmc4WnnAzi5FEB4IBed:Wd16iSNp8G7EB4IBed

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e2a9be2eff6cbe7db7d7bccccd3c84

Files

b5e2a9be2eff6cbe7db7d7bccccd3c84
.exe windows:5 windows x86 arch:x86

ba4184f4a4454721d0af385570e78ae7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
DuplicateTokenEx
RegDeleteValueA
RegQueryValueExA

shlwapi

StrStrW
wvnsprintfA
SHDeleteKeyA
PathFindFileNameW
StrCmpNIA
PathRemoveFileSpecW
wnsprintfA
wvnsprintfW
PathCombineW
wnsprintfW
StrCmpNIW
PathMatchSpecW
PathFileExistsW

Sections

.dsf
Size: 39KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dczqz
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxkp
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ