c5a85aeed4af5dd1c98af9b89c9ce07a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5a85aeed4af5dd1c98af9b89c9ce07a
Size

217KB
MD5

c5a85aeed4af5dd1c98af9b89c9ce07a
SHA1

068817e641e3a5787f42c905cfe394152fa000f2
SHA256

738dfe94eb267d77d4990d502594fc6ec21f92fa4d9593976a66fed412becd30
SHA512

714f59ae6677fe2bc72bbf3c0a6facad02634cf1bd035ab8d58fb977fd137ac609534f590b93259e42c9279c6f1cece7f44afbff052f3c04a548020d1ea4fc66
SSDEEP

6144:UKwcBPR/wObG+bFuDwN00dW83C15HvMwFXt5uiF9z8rhk:PpBPR5CgdWL15H/Fnuc+rq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5a85aeed4af5dd1c98af9b89c9ce07a

Files

c5a85aeed4af5dd1c98af9b89c9ce07a
.exe windows:4 windows x86 arch:x86

16ccae3ab982bc1300b362cce483b466

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
LCMapStringA
CloseHandle
GetCurrentProcess
ExitProcess
CreateFileA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegEnumKeyA
RegDeleteValueA
RegCreateKeyA
RegSetValueA
RegDeleteKeyA
RegCloseKey
RegOpenKeyA
RegEnumValueA
RegQueryValueA

Sections

.text
Size: 160KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ