b5f889890e96de28046cb71bd4f60196 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5f889890e96de28046cb71bd4f60196
Size

158KB
MD5

b5f889890e96de28046cb71bd4f60196
SHA1

23e8e0f13c0f3f2a8aa3d086d6a7ebebea901fb3
SHA256

cabab01d581156674dcc477aa19616515e348b83c10be8ed7e4b5bca3efa0a95
SHA512

6b66b6b8d644ee3e7608f043b1a02e22543054e84c02afbaa3cf4a8b6173fd94dc3a56291e640b93559941f2ba18647461a41b2af78863a81bc7869ed940cc28
SSDEEP

3072:7i99h/DUcT5zKocFkOaboWJIvbp/IkPcnRQqG9swMqo/0UX8RuzOjNIme:W99RjT52BkOsRJIvdjPcnRQqGq7qozXX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5f889890e96de28046cb71bd4f60196

Files

b5f889890e96de28046cb71bd4f60196
.exe windows:4 windows x86 arch:x86

95ed0fc0bb035c0a04605b48ca337f53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 146KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE