5c5771b778449d01e3cc445f51a16ec1b2cb8d7aab502387af2878bdec5332d3 | Triage

Sharing

General

Target

5c5771b778449d01e3cc445f51a16ec1b2cb8d7aab502387af2878bdec5332d3
Size

1.3MB
MD5

25ac55d5455792a8977a8aef6fee4a12
SHA1

7b989a4692c0aca28f8d3127ed0b36be980dbc51
SHA256

5c5771b778449d01e3cc445f51a16ec1b2cb8d7aab502387af2878bdec5332d3
SHA512

8432d5c9bc5066ec68ea1a6ff8fbca90967afc1f797096c690a9fdc87772ab829a394e203201076c905f76341c19dbe89a21d261066a5a98a7918c237722539e
SSDEEP

24576:O+zPUzS3tFc9mttxHrHfRUdQb1KKVYAFBF/3WDae4eHFE2FSKV8mu:V3w9mL/RVwKpFzW+e4eHFwt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c5771b778449d01e3cc445f51a16ec1b2cb8d7aab502387af2878bdec5332d3

Files

5c5771b778449d01e3cc445f51a16ec1b2cb8d7aab502387af2878bdec5332d3
.exe windows x64

0333fa48d7eea8f099bbdbe517194ab7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

iphlpapi

GetInterfaceInfo

msvcrt

_wcsnicmp

psapi

GetMappedFileNameW

kernel32

Sleep

user32

GetWindow

advapi32

RegSetValueExA

shell32

SHGetFolderPathW

Sections

.text
Size: 38KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ