53e96b8b085d1a0017c27d276621e12b21eae67fc66f24f30758a22dd3e5f6f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53e96b8b085d1a0017c27d276621e12b21eae67fc66f24f30758a22dd3e5f6f1
Size

196KB
MD5

5c0a9adcb3bad3e43115219f029d4f9e
SHA1

e9c0611cf61ca0b0dee81e0d2d8d5c5e670223d0
SHA256

53e96b8b085d1a0017c27d276621e12b21eae67fc66f24f30758a22dd3e5f6f1
SHA512

366b2bf6fcffb7ccb983b65cd960a67a3a9f329271648685ed63f232210403b40e3db95df6062e04559faf4c7ac6eff74b13ebfb89951fdea2c458b709dc3795
SSDEEP

384:DQQ12DE1b7Av7L0L872gjuOBFSRyWCRlNWXpYuZwL//BVbvyzJt67f2JddVm8qJP:ErA1m7tDiRAWZGHBJo6Mk5mptUb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53e96b8b085d1a0017c27d276621e12b21eae67fc66f24f30758a22dd3e5f6f1

Files

53e96b8b085d1a0017c27d276621e12b21eae67fc66f24f30758a22dd3e5f6f1
.exe windows:4 windows x86

13ab381dacef214bd7c905ade17ea0aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
CloseHandle
lstrlenA
WriteFile
CreateFileA
FindResourceA
GetProcAddress
LoadLibraryA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
GetOEMCP
GetACP
GetCPInfo
ReadFile
MultiByteToWideChar
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
HeapAlloc
GetLastError
FlushFileBuffers
SetFilePointer
GetStdHandle
WideCharToMultiByte
GetModuleFileNameA
VirtualFree
VirtualAlloc
HeapReAlloc
SetStdHandle
GetStringTypeW

msvcrt

??1type_info@@UAE@XZ
??3@YAXPAX@Z
_onexit
__dllonexit
_CxxThrowException
_CIpow
__CxxFrameHandler
??2@YAPAXI@Z

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 512B - Virtual size: 124B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ