5ad06fab8548b09a0bfda07f488b154a9e3d76cfa0b053af3ae0a7765940ac7e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ad06fab8548b09a0bfda07f488b154a9e3d76cfa0b053af3ae0a7765940ac7e
Size

6.2MB
MD5

0e039f2673c575a212330897dcf896d5
SHA1

82d45f319fdb8a72cf831cd48227341925a48e3f
SHA256

5ad06fab8548b09a0bfda07f488b154a9e3d76cfa0b053af3ae0a7765940ac7e
SHA512

b17e1dbf62d6417346741639fbc79e77dd8c31b71caec95c0a6f336f178437b0b6957cfd0eaf6908607ddacf94316e7ac43e9147b181823280b9cb59bd89cb70
SSDEEP

196608:oUbyXzE5aZ80ekfF1GNreKqLbnbKs1PM2nGzDKs:1yXzEYZ80ek7hKq3bKsZSz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ad06fab8548b09a0bfda07f488b154a9e3d76cfa0b053af3ae0a7765940ac7e

Files

5ad06fab8548b09a0bfda07f488b154a9e3d76cfa0b053af3ae0a7765940ac7e
.exe windows:4 windows x86

372423add0b5006dc1dee56690a18100

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
VirtualFree
VirtualProtect
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
LoadLibraryA
CreateFileA
WriteFile
CloseHandle
GetLocalTime
VirtualQuery
IsBadReadPtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
FlushInstructionCache
GetSystemInfo
VirtualProtectEx

user32

wsprintfA

shlwapi

ord158

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.virbox
Size: - Virtual size: 1.5MB

IMAGE_SCN_MEM_READ

.virbox3
Size: 6.1MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ