c5c76f275e3be7c817005f44b2c1a30a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5c76f275e3be7c817005f44b2c1a30a
Size

622KB
MD5

c5c76f275e3be7c817005f44b2c1a30a
SHA1

a88834adbe70dea76cd7e15b5be450ad385e61d1
SHA256

b73307b99ecc412a49a0dbf1c7a8452abf3bec7ad31ebc226e99dd68941b9571
SHA512

5c0befd246a4b1337d11dbf2d5aebd70493043740dc3604e8f77dc37c0793918ae25b6e0895aaf3b79bf12da2efd63ab7736c36adaa62c2a4e2cc277513dc004
SSDEEP

12288:5IrfLp+/8s9+sBGvcWbS8gUu4O94ZgdCwFCq7q2B81k2rD:5uNLs9TBGvc18P+94ZgMe7q2G1prD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5c76f275e3be7c817005f44b2c1a30a

Files

c5c76f275e3be7c817005f44b2c1a30a
.exe windows:4 windows x86 arch:x86

2e142984b0c96aacf7c0eb7d5f52b66e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

IsDialogMessageA

gdi32

ScaleWindowExtEx

winmm

midiStreamStop

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

GetOpenFileNameA

Sections

.text
Size: - Virtual size: 401KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.upx0
Size: - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.upx1
Size: 568KB - Virtual size: 565KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE