53d24328a5b043c36ea4ff5b39cf1f60_console[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53d24328a5b043c36ea4ff5b39cf1f60_console.exe
Size

6KB
MD5

53d24328a5b043c36ea4ff5b39cf1f60
SHA1

bac4639b5283441e2b7e5a1d0235021b58a13853
SHA256

99f47132dc3d9835f927d3e31f96072fcfc5b305036c8dc5df0841178106f32f
SHA512

32825d1559d8e598b1837178ebf89dd267a94a8ed214b11b5356713f5e560c5c1cc9efbe63340f8d4e5276dfdc39dc0d55ef3863a9c5ef23993d3aa8585a6286
SSDEEP

96:mtHGXL5hFw/bGN2lHPiue9n99pTrPhCzXor4:QGXLFwTUUvib999Teor4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53d24328a5b043c36ea4ff5b39cf1f60_console.exe

Files

53d24328a5b043c36ea4ff5b39cf1f60_console.exe
.exe windows:4 windows x64

7b106ee44b1c664b1ae127cd15e2a88c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LocalAlloc
GetSystemTime
Sleep
ExpandEnvironmentStringsA

msvcrt

memmove
printf
system
_vsnprintf
__set_app_type
_controlfp
__argc
__argv
_environ
__getmainargs
exit

urlmon

URLDownloadToFileA

snmpapi

SnmpUtilOctetsCpy
SnmpUtilOidCpy
SnmpUtilOidAppend
SnmpUtilVarBindCpy
SnmpUtilOidFree
SnmpUtilPrintOid
SnmpUtilMemFree
SnmpUtilMemReAlloc
SnmpSvcGetUptime
SnmpUtilVarBindFree
SnmpUtilOctetsNCmp

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ