5e139227bd6a72f5c52bd34bf8f6c06c73c480c503388b516ee6d181f0f68cab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e139227bd6a72f5c52bd34bf8f6c06c73c480c503388b516ee6d181f0f68cab
Size

33KB
MD5

a7774a3102ef3e045ce799ab0ea88b47
SHA1

9675360fb23f25caa96f7112e64d0804bbf9617c
SHA256

5e139227bd6a72f5c52bd34bf8f6c06c73c480c503388b516ee6d181f0f68cab
SHA512

ad1fb5e376d4ff84ef8b24dfe3760bfd3c7d2362f6222c6c33de92d2fbf5ca891534e0b88aade448875cad5aaa4fe56578646628f534503fc963a6da1f4e4d8f
SSDEEP

384:HgPKj1LQeANccYp9cWKzmti3O3r2fGklbxDjFzWT/r4snnpleni3/:Hg2LQe7cIcQths3KTD4+nLeni3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e139227bd6a72f5c52bd34bf8f6c06c73c480c503388b516ee6d181f0f68cab

Files

5e139227bd6a72f5c52bd34bf8f6c06c73c480c503388b516ee6d181f0f68cab
.exe windows:5 windows x86 arch:x86

cad810e9c1674ee81bd89d5d1ce7dff5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

UpdateWindow
ShowWindow
PostQuitMessage
GetMessageA
DispatchMessageA
TranslateMessage
CreateWindowExA
RegisterClassExA
DefWindowProcA
SendMessageA
SetWindowTextA
GetClassLongA
GetWindowTextA

kernel32

CreateFileA
HeapAlloc
GetProcessHeap
LoadLibraryA
GetModuleHandleA
HeapCreate
DeleteFileA
CloseHandle
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoA
ReadFile
FlushFileBuffers
Sleep
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection

comctl32

ord17

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ