c5b4ee90d317d33eb510898273ee26d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5b4ee90d317d33eb510898273ee26d7
Size

63KB
MD5

c5b4ee90d317d33eb510898273ee26d7
SHA1

bff9ddbb9e683626433ffa56e945ee96dd5fcbdc
SHA256

5c2fd933da6d740340692fa313b81ef6148b74f5d6afe35c0ab7b2eb50a9ed46
SHA512

cc314e2d71f10215aa79561ca78d49713537d1be0610ac7980ff8e4828b23e7ea7d99dfcc88e58f84476dd05a112e6ee13ab6429e9c30ac06d871e93c48d8465
SSDEEP

768:eLHKmM0qauedO1d6pHzvZ4GHPqV2EvmnMlsmjF7DcMWO2RB8EqxMQP8xccAessTZ:eWmMyMWO0Sg3i5WvPqxMQP8VXs0JEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5b4ee90d317d33eb510898273ee26d7

Files

c5b4ee90d317d33eb510898273ee26d7
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 21KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE