5fef71a315e7337c44fb023335c3f735d65bf1ddb08228031388eca1dfa9f480N | Triage

Sharing

General

Target

5fef71a315e7337c44fb023335c3f735d65bf1ddb08228031388eca1dfa9f480N
Size

30KB
MD5

b71eb70874c0c4eb3363b39b373c7f40
SHA1

234bb2d486bd74218a9604f4c92f1625e07c12d3
SHA256

5fef71a315e7337c44fb023335c3f735d65bf1ddb08228031388eca1dfa9f480
SHA512

f635bd4abe1e95008af0b2ecdb1f9d0ec0888e4c67e910bb95f367992070f1e531d5c217d5e33103f42b07abee14e65d9e118c735ccaa553f7a568eb662cdad6
SSDEEP

768:X6LsoEEeegiZPvEhHSG+gp/QtOOtEvwDpjBjb1o:X6QFElP6n+gJQMOtEvwDpjBn+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fef71a315e7337c44fb023335c3f735d65bf1ddb08228031388eca1dfa9f480N

Files

5fef71a315e7337c44fb023335c3f735d65bf1ddb08228031388eca1dfa9f480N
.exe windows:5 windows x86 arch:x86

7ba3aa8366ce167c7a77ebd6e6fea8e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
GetMessageA
UpdateWindow
EndPaint
DispatchMessageA
BeginPaint
TranslateMessage
MoveWindow
CreateWindowExA
RegisterClassExA
DefWindowProcA
MessageBoxA
SendMessageA
DestroyWindow
LoadCursorA
LoadIconA
ShowWindow
GetWindowRect

kernel32

GetLastError
lstrcpyA
GetModuleHandleA
GetCommandLineA
FindFirstFileA
FormatMessageA
FindClose
FindNextFileA
DeleteFileA
CloseHandle
GetACP
CreateFileA

gdi32

CreateFontIndirectA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ