b5c302d0289d3f604f477f9f965ddcda9446506cbce5102ef16e2c0c0cb4967fN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5c302d0289d3f604f477f9f965ddcda9446506cbce5102ef16e2c0c0cb4967fN
Size

81KB
MD5

f7e62cbd8687ea9568e921279ce2f490
SHA1

3cfd3cff897aac7a53ef708d9e91f3d4604a90b6
SHA256

b5c302d0289d3f604f477f9f965ddcda9446506cbce5102ef16e2c0c0cb4967f
SHA512

db745812c7ed4ca52c6e1cd3b739f8a525fdac6381ac49a3e5fa07758cd38c15000e82fda50f8b7d1fca79a71aad0122927e22ac54abd8ff865503512ef5d3fe
SSDEEP

1536:/axxqcBcbRZUFMP2B80aG3KdVvPGqB9vmqici:gqcBWx+D+dPLTvmqij

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5c302d0289d3f604f477f9f965ddcda9446506cbce5102ef16e2c0c0cb4967fN

Files

b5c302d0289d3f604f477f9f965ddcda9446506cbce5102ef16e2c0c0cb4967fN
.exe windows:4 windows x86 arch:x86

4ade885b5feeaaab8388e64d0f73da7e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
LocalFree
ExitProcess
SleepEx
GetCurrentThread
CreateMutexA
GetSystemDirectoryA
GetCurrentThreadId
GetStdHandle
GetVersionExA
GetComputerNameA
GetWindowsDirectoryA
GetCurrentProcess
LocalAlloc
VirtualAlloc
GetCurrentProcessId

advapi32

GetUserNameA

user32

GetSystemMetrics
GetActiveWindow
GetForegroundWindow

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ