5bdd35e9b84c6f78d059325eb0710980 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bdd35e9b84c6f78d059325eb0710980
Size

488KB
MD5

5bdd35e9b84c6f78d059325eb0710980
SHA1

4db933351a70594997c5e2664c9496138b6d0057
SHA256

4ab076d9d3992599b4cba05364634deec8f357b84ffa89d1a9a37c7d2ac028ab
SHA512

980cd04711b3f40533301b393b04b0b23c341cc9f05488cf9e8cca52c11364d046be5c4ce29ea977c348391aacec3240bace612e2bf0adebd23966af314677a2
SSDEEP

12288:y/SbPYI1QBLPztngbTHWWROAyLyW3KQmXJTa2zn6XI:BQQQBPt+THBUAyLHKvRD7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bdd35e9b84c6f78d059325eb0710980

Files

5bdd35e9b84c6f78d059325eb0710980
.exe windows:4 windows x86 arch:x86

8e3365567da6586676c8bf81c62e4026

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlNewSecurityObject
NtRenameKey

kernel32

LocalCompact
FatalAppExitW

user32

GetMenuCheckMarkDimensions
GetDesktopWindow

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE