c5bae12c94be85db768c0d982542910e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5bae12c94be85db768c0d982542910e
Size

1.3MB
MD5

c5bae12c94be85db768c0d982542910e
SHA1

fce8eceefbea374b8fee8412caef010e810356a4
SHA256

2d070b1866d28cc4d99294cf0e0fe4d53f54331d7d3b8cce7af587678fe0bbca
SHA512

b363ee4e1aa306cbf1b8848bdd813e5282fe5183e00d35bded0693a181ba698f944dbb6b927e7e0738be46f1670e2c36d135758338b7de5815644f986e2e94dd
SSDEEP

24576:ni9XBapfj/K9v/qbKSAq9gfHXHd0sshgqSHb1svk2F/zveJca48:OBcfj/sq2m9aXdhst2Yk2cJca5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5bae12c94be85db768c0d982542910e

Files

c5bae12c94be85db768c0d982542910e
.exe windows:4 windows x86 arch:x86

923545ca4e98fa50cf010e2ab4c2d348

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 1.3MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE