c5b280204e91b612c435939a2c3bc6e6 | Triage

Sharing

General

Target

c5b280204e91b612c435939a2c3bc6e6
Size

188KB
MD5

c5b280204e91b612c435939a2c3bc6e6
SHA1

cde50b481da065d5bdcf27f34a17167432364b24
SHA256

e68d07666f3eda201e3ea684c769539fccdac574871333c56f2d09ae02ad955b
SHA512

0398a0b0cc6d67965d7dfaf17cb80094191e2ed37db26b8ce5579b016e70a50711505f5797b448e83b859be249805d1bea234e19f0eb9dd8a622f5a27097c863
SSDEEP

3072:NG/uurKHYY7mI12G302HjtacASkafsvWe5c/6q7lQDCB+vs+JA+c0PfLmaH:NcHYaI8GE2D0lvWeyCclPBkpaaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5b280204e91b612c435939a2c3bc6e6

Files

c5b280204e91b612c435939a2c3bc6e6
.exe windows:5 windows x86 arch:x86

112c2dbf0c24863c61d5ffe9d4d8d1df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
ExitProcess
GetCurrentProcess
CloseHandle
CreateFileA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
wsprintfA
SetWindowLongA
CreateWindowExA

advapi32

RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegSetValueA
RegDeleteValueA
RegEnumValueA
RegEnumKeyA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ