5fc2f6d9df5defc5f249b9f29e2f501735ddffccfe137b3e97d390b5b639e630N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fc2f6d9df5defc5f249b9f29e2f501735ddffccfe137b3e97d390b5b639e630N
Size

39KB
MD5

12cacb8b9c157793464fc2f3c1a654a0
SHA1

6ab359b8f83a3f4712be610d43e6547ad8e4e02b
SHA256

5fc2f6d9df5defc5f249b9f29e2f501735ddffccfe137b3e97d390b5b639e630
SHA512

953b069ea9ac5e2b71afa313c6766e018713f75e5ad2c9cc4aacd20f854478cf48d24c039b38d8ed76682b854d6575d0957052c6f191cd28b8c621db00662046
SSDEEP

768:T4j7YBkweh63h7iQroC8XtgZnRl2zVBDj9sW3doLobvdFlhWUdsWbtXRArO:sj8vs63h7iQroCgtg4Ket

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fc2f6d9df5defc5f249b9f29e2f501735ddffccfe137b3e97d390b5b639e630N

Files

5fc2f6d9df5defc5f249b9f29e2f501735ddffccfe137b3e97d390b5b639e630N
.exe windows:5 windows x86 arch:x86

05080d030f33eb8edc3bb8b6c380cfbf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

kernel32

TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
GetModuleHandleA
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange
QueryPerformanceCounter
GetSystemTimeAsFileTime
ExitProcess
UnhandledExceptionFilter

user32

BeginPaint
CreateWindowExW
DefWindowProcW
DispatchMessageW
DrawTextW
EndPaint
GetMessageW
GetSystemMetrics
GetWindowRect
PostQuitMessage
RegisterClassExW
TranslateMessage
BringWindowToTop

gdi32

TextOutW

winmm

mmioOpenW
mmioClose

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ