5371b7c396f87271d15c9d20b463e93bd3e2c27395f08ab090bccfda0e039cec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5371b7c396f87271d15c9d20b463e93bd3e2c27395f08ab090bccfda0e039cec
Size

990KB
MD5

f8f1ff341764b375f2506531b156541b
SHA1

554965f4b0efc912a1afc89e63999d2e3afd3beb
SHA256

5371b7c396f87271d15c9d20b463e93bd3e2c27395f08ab090bccfda0e039cec
SHA512

a26db2eb5b84f4826cb430b0b13e8c6c69848613966fa955e7522516a43b6631cac0c59963ac6be997e03309cca50e9a03e9dea4fee1a081e52ad472a98e37ef
SSDEEP

24576:kkG66YjIGLgU9wFF4EIEoWaB6RNljRsy7:OYjIKpoIzWaBALjy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5371b7c396f87271d15c9d20b463e93bd3e2c27395f08ab090bccfda0e039cec

Files

5371b7c396f87271d15c9d20b463e93bd3e2c27395f08ab090bccfda0e039cec
.exe windows:4 windows x86 arch:x86

88e19a34258a038b8e42f3b1c82bab84

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

SysAllocString
OleCreateFontIndirect

kernel32

GetModuleHandleA
GetStartupInfoA
GetCurrentProcess
MultiByteToWideChar
InterlockedIncrement
ExitProcess
TerminateProcess

Sections

.text
Size: 836KB - Virtual size: 836KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ