5bb7d726582d5d77eae70ad757e656b90d3b2cb0ddd3ff1c9805efe8ee1a77b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb7d726582d5d77eae70ad757e656b90d3b2cb0ddd3ff1c9805efe8ee1a77b7
Size

145KB
MD5

93a2fdcc18895aef0050c739b057cf6a
SHA1

81d578179155a7899bb570d976391717f7397761
SHA256

5bb7d726582d5d77eae70ad757e656b90d3b2cb0ddd3ff1c9805efe8ee1a77b7
SHA512

66c2616a50075b7faeb9d393cd347583c9932fadd516d2a479a2c00d2b3c3e9732c3583065ff3dd1ef82fa33379b7651130cfec645abb11f2c59f07b20f99b82
SSDEEP

3072:3L1MX4+ZLpLcydC6M0YNyQJfm7LWU0CxcePOMixvpss8z/qoutXL:3L1MxLc36WzJO7qdIchXuscqoSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb7d726582d5d77eae70ad757e656b90d3b2cb0ddd3ff1c9805efe8ee1a77b7

Files

5bb7d726582d5d77eae70ad757e656b90d3b2cb0ddd3ff1c9805efe8ee1a77b7
.exe windows:4 windows x86

532555de12c53ae5cca9f69f44b85ac2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

atoi
strchr

kernel32

HeapFree
LoadLibraryA
GetProcAddress
GetProcessHeap
GetModuleHandleA
ExitProcess
FreeLibrary
IsBadReadPtr

user32

wsprintfA
MessageBoxA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 410B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 137KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 664B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ