05ef749a5955e1a777ca1fc151281afc | Triage

Sharing

General

Target

05ef749a5955e1a777ca1fc151281afc
Size

39KB
MD5

05ef749a5955e1a777ca1fc151281afc
SHA1

910477ea1d13e72ca6db58581866d8c8f0ad37cc
SHA256

e7ccdf9b31141265651b9a550b5abca8ed9dac00fb1a7f9a34be2044a3435fc7
SHA512

3e52e588b51babc3e6d3b777c4e3f3f191f004bb96b10e4195d3b420fbaa88deb0a317a5b8b0506014db9b8ec95cb9ccea1af0d7a7f074decd85e09054999e20
SSDEEP

384:H4XTTeYkseGf9T44dAkMQfQHbrgG/cQ6i+B8D7rFg59tVodBVjNfyOn:YX9kz2t7kf/fHrFg59MRN5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05ef749a5955e1a777ca1fc151281afc

Files

05ef749a5955e1a777ca1fc151281afc
.exe windows:4 windows x86 arch:x86

fe5db82acba4930d8b7ddc4dcab540b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pbvm80

ord137

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetCommandLineA
GetCPInfo
IsDBCSLeadByte
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
GetACP
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
RtlUnwind
VirtualFree
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
LoadLibraryA
WriteFile
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size:

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ