b5201305253ea667165daf4d856ae7a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5201305253ea667165daf4d856ae7a6
Size

432KB
MD5

b5201305253ea667165daf4d856ae7a6
SHA1

8136c9c36fc65a242b644c118994e2434ff6b5b0
SHA256

0c20c72554a605d82706fe77366b9dc396b8c3d468aa8d851cb3fb5502c3909d
SHA512

ff79c0287e94b9e663b92c46e6736884cf85ef7f23941833aa8c510a7d1c935178a9745286602cbc83ced8931d68ad255c0906ab105fe17119b08de6cd5e8e44
SSDEEP

12288:MJ+xz3LdIXzlT9RvvxDTOTEv6OceGciwix9n:MA7dIXRT9RvvlTOg4dwib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5201305253ea667165daf4d856ae7a6

Files

b5201305253ea667165daf4d856ae7a6
.exe windows:4 windows x86 arch:x86

5859aba9fc7be7770f13cf7555b3200a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlInitNlsTables

kernel32

OpenJobObjectW
GetUserDefaultLCID

advapi32

CryptEnumProviderTypesW

oleaut32

VarI8FromUI1

user32

GetClipboardOwner
GetDesktopWindow

Sections

.text
Size: 429KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 340B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE