d5bf888b90e93dcdea2b75d368474280 | Triage

Sharing

General

Target

d5bf888b90e93dcdea2b75d368474280
Size

72KB
MD5

d5bf888b90e93dcdea2b75d368474280
SHA1

87690a54b14acd502d63f99908b416e8969c779c
SHA256

53c45f6870442dbeaf1a1c8f0c0d0fd2043d15e36c9bdb16c440644ebb4ac996
SHA512

96866d6518dadc19b598886baf00676aa33dd02cfe4a4771263afa20c5ab77084a53e545036ed481f912cd331718929403a7862f4df49d5aebce70d0c38ef3e1
SSDEEP

1536:vE5vdGUPMWLpbQ/UTO77gInaG/l8sdGZJ6:rUrccL8//Jgn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5bf888b90e93dcdea2b75d368474280

Files

d5bf888b90e93dcdea2b75d368474280
.exe windows:4 windows x86 arch:x86

c8428c4f0ef53d6729aa96dcdec60117

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryW
GetCurrentProcessId
CreateEventW
GlobalFlags
GetCurrentThreadId
ReleaseMutex
ReleaseMutex
HeapCreate
LocalFree
GetFileTime
GetPrivateProfileStringA
GetDriveTypeA
FindAtomA
lstrlenW
FindClose
InitializeCriticalSection
GetEnvironmentVariableW
IsBadStringPtrW
TlsGetValue
WriteFile

user32

GetKeyboardType
DrawStateW
GetSysColor
CreateWindowExA
GetSysColor
EndDialog
SetFocus
GetClientRect
DispatchMessageA
IsWindow
CallWindowProcW
GetClassInfoA
DrawTextA

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE