5f3c616c5081d8a9bd156ec339e6fcb898d04096946ec01346a1c779464722e9 | Triage

Sharing

General

Target

5f3c616c5081d8a9bd156ec339e6fcb898d04096946ec01346a1c779464722e9
Size

1.8MB
MD5

f970a7e9bc25c0cd9145dee4b11308f4
SHA1

82f1355e17fc5fdfd8c7c1f3c0154471d86ef69f
SHA256

5f3c616c5081d8a9bd156ec339e6fcb898d04096946ec01346a1c779464722e9
SHA512

4403c2c03c5f2778c438906b361be5c8b3c670e9a879dbb5cb0dcb3dc85285577bf159bb73e1276a9dda5c08e19c4edd6535535288e176fa6a8372ca06bbc2b3
SSDEEP

49152:iJHky1ZEyxj9He1wIEFMK9Lj5+JlKAOfa7APvxoNU:kEIEi9HikMK9KngcAOU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f3c616c5081d8a9bd156ec339e6fcb898d04096946ec01346a1c779464722e9

Files

5f3c616c5081d8a9bd156ec339e6fcb898d04096946ec01346a1c779464722e9
.exe windows x64

ee93ddebbf5258fb8be12e5333dca258

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteFile

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 560KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ