b5fc36390570f75842f386bbadb757b9 | Triage

Sharing

General

Target

b5fc36390570f75842f386bbadb757b9
Size

47KB
MD5

b5fc36390570f75842f386bbadb757b9
SHA1

e772fc286ceef5a94777b616ccc491594db63be9
SHA256

489d3f191ca365056968743f07cc4b1103ddc0233b1ece3c305ee7dee841eb4a
SHA512

43909cc89c380671eaf957e0cd33f954d07e60de9d44ceb718c5ded14ff4203e020637ba6b929e86dc50d5d68632b00f4ab5e015fd8bb119a0bfc7ab71874695
SSDEEP

768:gezXO/DwTTt/FlSSUXMlsmOD99x7W9gbxcdREYcZfOaG3qF:g+XAD4XlSSbllODHcEYcZkW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5fc36390570f75842f386bbadb757b9

Files

b5fc36390570f75842f386bbadb757b9
.exe windows:5 windows x86 arch:x86

5fd03f79fdac4e8510f9ec3f36e2430a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
FindFirstFileW
lstrcmpW
FoldStringW
GetCurrentProcessId
GetCommandLineW
MulDiv
GetFullPathNameW
LocalSize
GetLastError
WriteFile
SetLastError
HeapSetInformation
SetEndOfFile
DeleteFileW
GetACP
LocalReAlloc
GetFileInformationByHandle
GetProcessHeap
HeapAlloc
HeapFree
GetUserDefaultUILanguage
GetLocalTime
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentThreadId
GetStartupInfoA
WideCharToMultiByte
GetModuleHandleA

gdi32

LineTo

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ