c5682b3828c274ac6b5059818b591521 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5682b3828c274ac6b5059818b591521
Size

24KB
MD5

c5682b3828c274ac6b5059818b591521
SHA1

f1eed713563c41512eb8ed2ebf0aba4e89db4563
SHA256

4812eae48c3a24ba43e58a94b4899fe21caa9f1b9f34572a8ab41e71f3cfa462
SHA512

9467585ac738122ff8c37bf2b59da0a6e9d578fb3b8fdb1d06fec38b09688b8bbf8f2b3324fffc2afc80fb5714616738c99736592b877a46b9487edb5801890d
SSDEEP

384:L50nZQ3XLdLqYlYU3q1zsSEDOcqsOUMt3WPQGn5pPmlbFYRF5w1IIKKXFInPIR:KmdLRj3q1z+DCVUMtGPIYRF5DIKKX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5682b3828c274ac6b5059818b591521

Files

c5682b3828c274ac6b5059818b591521
.exe windows:4 windows x86 arch:x86

c0b12ce857fbdf9183f9b1de2e903f36

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
GetProcAddress
LoadLibraryA
VirtualProtectEx
CreateProcessA
GetCommandLineA
SetThreadContext
GetThreadContext
ResumeThread

user32

GetDC

gdi32

SetTextColor
GetTextColor

Sections

.data
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ