c05e641e75273377d13c686d8d2ad31c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c05e641e75273377d13c686d8d2ad31c
Size

12KB
MD5

c05e641e75273377d13c686d8d2ad31c
SHA1

5750d7d79beb04f133ec93a6b6041204c181fa3f
SHA256

b63d1f0f22074dfcc4d345890d0273747a74bca63bf26bb9ebcd7d1754bdcfcb
SHA512

c792f79022c912d6afe42a04eef820ed415a2fdddf6bb40f49a61777cf0756abfc0e4fba9daa2ba5f1c740e09570f11d080faeb7725292acd83c8f1edf0ab363
SSDEEP

48:6dHe7+PJnM3Dy2MGkwKg7VmvAJIF9SyccYWQ+ENCTuYs8VFCFXqiKg6ADj5BqR:fyRMjM7eml9SylYWQ+ENsVIF6ikA35QR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c05e641e75273377d13c686d8d2ad31c

Files

c05e641e75273377d13c686d8d2ad31c
.exe windows:4 windows x86 arch:x86

c494458029910d0ed6df63da0b05bbd4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 320B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ