b5aedfc0fdff8dfb3f1377d5d16a86a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5aedfc0fdff8dfb3f1377d5d16a86a9
Size

201KB
MD5

b5aedfc0fdff8dfb3f1377d5d16a86a9
SHA1

a5b804e81b703c4f3e9379dccbd64aa6735cbeb3
SHA256

98c53382150d7273f3ce03581da5571eaf1f4e77d0b7a0a27deb774621c17923
SHA512

a450415cddb0810f272830d26cf5712794596b90aa586049bbb639675c3bda52b62a19dfbbb70ab77327bc179f223962b9dcc4c3e815ae3f431f8eb109839632
SSDEEP

3072:tA2prWqjNMIZB0EU6YIVsYjiF8Lntk/mKvBARcSLmWPRV7icHZR3cW:tA2pa4df0E9sYOp/mKvBAxF71

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5aedfc0fdff8dfb3f1377d5d16a86a9

Files

b5aedfc0fdff8dfb3f1377d5d16a86a9
.exe windows:4 windows x86 arch:x86

9d38fc7ab11f55ecfe29a74e126aaa91

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
ExitProcess
ExitThread
GetCPInfo
GetCommandLineA
GetConsoleCP
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetPriorityClass
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
HeapAlloc
LoadLibraryA
MulDiv
QueryPerformanceCounter
SetUnhandledExceptionFilter
VirtualAlloc
VirtualProtect

msvcrt

wscanf
atof
fseek
sscanf
strlen
strncat
strncmp
strstr
wcscpy
strcat

user32

SetWindowLongA
SetClassLongA
ScrollWindowEx
KillTimer
GetWindowTextA
GetCapture
EndPaint
DrawIconEx

comctl32

ShowHideMenuCtl
MenuHelp
InitCommonControls
DrawStatusTextA
CreateToolbarEx
CreateStatusWindowA
CreatePropertySheetPageA
CreateMappedBitmap

Sections

.text
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ