65c0c165fa068b82d5cd792f0bdc80a6018191ccb82a828ee0ccb49455d709ad | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65c0c165fa068b82d5cd792f0bdc80a6018191ccb82a828ee0ccb49455d709ad
Size

5.5MB
MD5

1a9715fd2297ca9b93a5640ae55f29b7
SHA1

7c3cd339c0436472aae4115180b6b7df9bbddaa5
SHA256

65c0c165fa068b82d5cd792f0bdc80a6018191ccb82a828ee0ccb49455d709ad
SHA512

634765467ca7b3889c2fc73bcfb412a8e6a30c3108fcf80fc4b08dc9f95479c2bfbf1b291940931708889c057d1bdfb142a5528983ccb4858eef174d9eed1baa
SSDEEP

98304:zuQqfuThVdS62QYrniOacrb2lVwpTEBKCxO1ZI8IrO61b5oRmS0/9L:zuRu/dS6TYAc/2DuTEBjxO1Zt9ZkL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c0c165fa068b82d5cd792f0bdc80a6018191ccb82a828ee0ccb49455d709ad

Files

65c0c165fa068b82d5cd792f0bdc80a6018191ccb82a828ee0ccb49455d709ad
.exe windows:5 windows x86 arch:x86

82c301dd34e2abd1a8b9ded9114ecc1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageW
CharUpperBuffW

kernel32

CloseHandle
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

comctl32

ImageList_Create

Sections

.text
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.(>7
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Oty
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.o3W
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

._sc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ