c5e2e6f09994b76f6f65dedf044c6b64 | Triage

Sharing

General

Target

c5e2e6f09994b76f6f65dedf044c6b64
Size

77KB
MD5

c5e2e6f09994b76f6f65dedf044c6b64
SHA1

67bc3b77846e5e26c1a9d1e24e0e5993b7375259
SHA256

b3903b80e08b7e8e5fbd6bfd1c72a8bd46f1fd8054525e8baf82694258f5f397
SHA512

622beb50216bff890d27a0a1ec686a92a94b4ebd5c0ee4aa7d1237be7fd4949c8bbb4705f763409e64ee6511ed2cdddf9803ed54f75bffd48d85fac2ea84fb74
SSDEEP

1536:IPPA890ZIgO3QmeM1Qx9eHDELPziEiDXJLaPlM7K:KIK8M1MqDELhiDX4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5e2e6f09994b76f6f65dedf044c6b64

Files

c5e2e6f09994b76f6f65dedf044c6b64
.exe windows:4 windows x86 arch:x86

3238f0ac1881f3c48a9557db59c862b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
DestroyCaret
FillRect
GetActiveWindow
GetMonitorInfoW
GetShellWindow

advapi32

ReportEventW
RegFlushKey
DecryptFileW
ReadEventLogW
OpenThreadToken

wininet

FtpGetFileW
GopherFindFirstFileA
GopherOpenFileW
FreeUrlCacheSpaceA
HttpQueryInfoA

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE