b5ac6cc8f2a416c89428f0d38df943db1e12cab0eeb13c1d02ca416270514391 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5ac6cc8f2a416c89428f0d38df943db1e12cab0eeb13c1d02ca416270514391
Size

39KB
MD5

dcc806c9a3ad6ace7afbf65ec6c856c0
SHA1

3cbb65af76c7d441c3cd39240d8b89db94d5fe74
SHA256

b5ac6cc8f2a416c89428f0d38df943db1e12cab0eeb13c1d02ca416270514391
SHA512

6e70e7349712e511978ba98a16bd599099dc9234d8c4a4a27618a922719e84ac8442a8f5ed28313b488bd559f7edcf2b3eb9538a90ddaa1d6d7c63e8e4b58364
SSDEEP

768:yMfGLfl/I1nudd1s+WTZImyNxVdINXhI156g:yMeLl/I1nuddK1ymyNshA5H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5ac6cc8f2a416c89428f0d38df943db1e12cab0eeb13c1d02ca416270514391

Files

b5ac6cc8f2a416c89428f0d38df943db1e12cab0eeb13c1d02ca416270514391
.exe windows:4 windows x64 arch:x64

219bc0cef95965362ee16f6e2c28069e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetConsoleScreenBufferInfo
GetStdHandle
GetLastError
CloseHandle
CreateFileW
ExitProcess
GetCommandLineW
WriteFile
WriteConsoleW
SetConsoleTextAttribute
OutputDebugStringW
GetConsoleMode
ReadFile
Sleep
ResetEvent
PeekNamedPipe
WaitForMultipleObjectsEx
GetFileType
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
FormatMessageW
GetModuleHandleW
LocalFree
SetLastError
GetFileAttributesW
GetFileSize
GetVersion
GetCurrentDirectoryW
GetModuleFileNameW
GetEnvironmentVariableW
FindClose
HeapAlloc
GetProcessHeap
HeapFree
GetSystemDirectoryW
GetProcAddress
WaitForSingleObject
FindFirstFileW
GetFileTime
GetFileInformationByHandle
FindNextFileW

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ