d5ec35a85b60c1c0f1795ba223a30dee | Triage

Sharing

General

Target

d5ec35a85b60c1c0f1795ba223a30dee
Size

299KB
MD5

d5ec35a85b60c1c0f1795ba223a30dee
SHA1

cca7b30f75347f4cd3391be667b8680aeac2b621
SHA256

848fa9b28e360d7062608977b233eb0b0442ab8c9bda614cf814ad9a3692b8f5
SHA512

4108bbe1a7c0bb901bf6f999857328b595a4cfcba96f094d45cbea4a43dbc739cae04bc2e1ceaad55c1b05fc45e7a7c386b026a222fb3748ab1303e0d21d0371
SSDEEP

6144:Jk+k5YL/yeYu42/4MsQiYmiN/lIa+b5FIF1LeZdpX:WIzP/UQrm6yFG9e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ec35a85b60c1c0f1795ba223a30dee

Files

d5ec35a85b60c1c0f1795ba223a30dee
.exe windows:4 windows x86 arch:x86

45cd2155622bb0b0ed74ebc323f7f1e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryExA
LocalUnlock
GetSystemTime
SetEvent
LocalFree
CloseHandle
GetCurrentDirectoryA
PulseEvent
UnmapViewOfFile
GetModuleHandleA
GetComputerNameA
GetTickCount
HeapCreate
lstrlenA
SetLastError
CreateThread
Sleep
GetCommandLineW
CreateThread
CreateFileA

user32

GetDC
DrawEdge
SetFocus
GetKeyState
GetScrollBarInfo
CallWindowProcA
DispatchMessageA
GetDlgItem
CheckRadioButton
DrawMenuBar
FillRect
IsWindow
CreateWindowExA

clbcatq

CheckMemoryGates
UpdateFromAppChange
SetupOpen
SetSetupSave
DowngradeAPL

desk.cpl

InstallScreenSaver

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 628KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ