b5de7cf8136c0e5c39f3a9f542045e59 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5de7cf8136c0e5c39f3a9f542045e59
Size

37KB
MD5

b5de7cf8136c0e5c39f3a9f542045e59
SHA1

5c8be73876dd79d6ee2b8480f31203c65376fb0e
SHA256

386b23bc2d289a48608aeb46b606551bb7342026592e472234722d2b703dead7
SHA512

3e6e331a9afa69fa41596c0fa1a653e1f135b530c74f6bfcdf2a0b6f490976b5079d13d85a7801eeec20dfa29e803251e29fad8ae4df33c838c15fa6ccd951ea
SSDEEP

768:2Rx/uck1vvgGz4ft4PncK/iIqCMitCKnPuYXV8m9m3XoP11vY:+JgzVcKxq5+uYXV80mnoP11

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5de7cf8136c0e5c39f3a9f542045e59

Files

b5de7cf8136c0e5c39f3a9f542045e59
.exe windows:4 windows x86 arch:x86

7f1503a84c09d7acb3268f2c722df223

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetLastError
VirtualProtect
DisableThreadLibraryCalls
GetGeoInfoW
GetComPlusPackageInstallStatus
Module32NextW
GetPrivateProfileStructW

user32

AllowForegroundActivation
DialogBoxIndirectParamW
SendIMEMessageExA
LockWindowUpdate
CharNextExA

gdi32

GdiEntry8
OffsetViewportOrgEx
CreateMetaFileA
EnumFontsA
GdiEntry2

Sections

.text
Size: 1024B - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE