b5d70a697bc01d8fba0dc5370e417519ed5ab2263e91185c34a7cc80b331eee3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5d70a697bc01d8fba0dc5370e417519ed5ab2263e91185c34a7cc80b331eee3
Size

8.9MB
MD5

8c9a5f217cc4fe758a37edfcf3902bfb
SHA1

9371009275fcfa3a623f4c41275cd3e5ee35f3cf
SHA256

b5d70a697bc01d8fba0dc5370e417519ed5ab2263e91185c34a7cc80b331eee3
SHA512

5f07f7b6bb8dc1b3369e1d076e83bf55e08b3afb117737b89da92565ef6097129d1a2fd9795b6400705986fd22eaa96826fe93e0ccbf1f6b709d40bb5ae74561
SSDEEP

49152:NRJEIQAUPd3Q4WY6qzI2c5gtvGWjmZvIGX7x5u/kyocyVxQBJM0Ab++s11bJr3U0:DqIsJFoRNJakATIiDewQm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5d70a697bc01d8fba0dc5370e417519ed5ab2263e91185c34a7cc80b331eee3

Files

b5d70a697bc01d8fba0dc5370e417519ed5ab2263e91185c34a7cc80b331eee3
.exe windows:4 windows x86 arch:x86

3173ea1a90fa1244ac4d84c950beaf27

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cdlli15

_SqlRunStartup@16

kernel32

LocalFree
_lread
_llseek
GetModuleFileNameA
_lclose
LocalAlloc
_lopen
GetStartupInfoA
GetModuleHandleA

user32

LoadStringA
MessageBoxA
wsprintfA

msvcrt

_exit
_adjust_fdiv
__setusermatherr
_splitpath
memchr
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_controlfp
__p__commode
__p__fmode
__set_app_type
_except_handler3

Exports

Exports

GuptaProgId1

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 891B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ