5d475b6470b2319df63e8ebdf26a7c34fc31133c96562c1097cf502eefa9a37f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d475b6470b2319df63e8ebdf26a7c34fc31133c96562c1097cf502eefa9a37f
Size

433KB
MD5

196f1965ca3c5964f92d4bcc6d7d0171
SHA1

d2198ae854c7727bac9a2f1bec012750b22a9741
SHA256

5d475b6470b2319df63e8ebdf26a7c34fc31133c96562c1097cf502eefa9a37f
SHA512

85680e45d8fffba816e33403225efe3b8f215888613f3c608a2d8e382f4e4278d78b9b4290e0954fb1377873c063afd402169deef8675d366e9fba5a66c54954
SSDEEP

12288:1h9zJTO1yxJ07cu4pdnwF1mcXQ9p2p//Ccf/:pR9xJvemRP2N/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d475b6470b2319df63e8ebdf26a7c34fc31133c96562c1097cf502eefa9a37f

Files

5d475b6470b2319df63e8ebdf26a7c34fc31133c96562c1097cf502eefa9a37f
.exe windows:4 windows x86 arch:x86

423679d4bdf92bd25f12f53b7b6b4a77

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtFilterToken

advapi32

GetTokenInformation
BackupEventLogA

user32

GetWindowTextW
GetCapture
GetClipboardViewer

kernel32

GetUserDefaultLCID

Sections

.text
Size: 430KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE