f5f3dfe12aa02a8a763f690cf6900fcd4eaefecb49128091eb30bd267d07d945 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5f3dfe12aa02a8a763f690cf6900fcd4eaefecb49128091eb30bd267d07d945
Size

25KB
MD5

e8a53adbb2155c952298b216640ee226
SHA1

57def2032e8e093392e98708a9195b1305e9ac9f
SHA256

f5f3dfe12aa02a8a763f690cf6900fcd4eaefecb49128091eb30bd267d07d945
SHA512

44d2fcf730ebc87e6bfd2fc9b51691ca73968ce6fa105f3778c02b45f1fcc790e1cf4a5bdf09a74cff2f02441f2476388db0c3ec8f1f27834bd0554e36751f1d
SSDEEP

384:K/HTfuty4H5wakydVf/4xQ8uFvmSf+gaVu0rB5A:K/zcj5Pf/r8uAs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5f3dfe12aa02a8a763f690cf6900fcd4eaefecb49128091eb30bd267d07d945

Files

f5f3dfe12aa02a8a763f690cf6900fcd4eaefecb49128091eb30bd267d07d945
.exe windows:4 windows x86 arch:x86

1e84ffa21ab885469d86810171c6502a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvidctl

GetProxyDllInfo

ole32

StgOpenStorage

kernel32

RaiseException
HeapSetInformation
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
InterlockedExchange
Sleep
TerminateProcess

advapi32

CredFree

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE