e0c5f8d662301c6c002952e40449b206 | Triage

Sharing

General

Target

e0c5f8d662301c6c002952e40449b206
Size

36KB
MD5

e0c5f8d662301c6c002952e40449b206
SHA1

b859b3a16642c2c106c8f303ecf4949683b0edab
SHA256

38d1322b772475a05b9e599cec92c52a4e07fb05afd040ec068bbc1375aebd4e
SHA512

81b23227ce84b0ceea74f692d82414b1b98cc131689f2e7ac1cc0cc3a5e9ddd6f958699096ba231e4454e4e8e75a075727f9cba0e3a65c2c46abbe0c1dff9c9d
SSDEEP

384:l0mHZEBKg4thgWNSDu+iyC6pM8wc9Km7P9:l0mH4t78SPiyCss

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e0c5f8d662301c6c002952e40449b206

Files

e0c5f8d662301c6c002952e40449b206
.exe windows:4 windows x86 arch:x86

f0941efaadf419ae940996a8a483a1d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ResumeThread
CreateFileA
LoadLibraryW
GetModuleHandleA
FindAtomW
SetLastError
ReleaseMutex
GetDiskFreeSpaceW
CloseHandle
GetTickCount
HeapCreate
CreateThread
SetEvent
lstrcmpiW
ResetEvent
GetFileAttributesW
GetComputerNameA
GetSystemTime
LocalFree
GetCommandLineW

user32

CloseWindow
CreateWindowExA
GetClipCursor
DestroyCaret
DispatchMessageA
GetDlgItem
FillRect
CallWindowProcA
DrawStateA
GetClassInfoA
SetFocus
GetKeyState
GetComboBoxInfo
MessageBoxA

cryptdlg

CertTrustCertPolicy
DecodeRecipientID
CertConfigureTrustA
CertTrustInit
CertTrustFinalPolicy

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE