5c266baac1d61a50a3ac79e267ab6ce9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c266baac1d61a50a3ac79e267ab6ce9
Size

87KB
MD5

5c266baac1d61a50a3ac79e267ab6ce9
SHA1

48b217d02346697d7f7d18f77af4e83b0a507c95
SHA256

b04b09e04e681a44b6ee05a8d68d6e5e79d16bb9cd669f33ae2c410cd582367f
SHA512

89492b199eb0a9d36149a453f5b78398e2cc7691df7b97fdf2d3cafdaf7079a6ba0bdad821f6643eb8fac3edcbb3f2a490878e634fede24e84a6c6fd94219e2d
SSDEEP

1536:Pbi5LqQpHnuhmUC0qQuB0ReWxyVZ9z91LEyUwQ:PeLqIB0ReWxUzL/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c266baac1d61a50a3ac79e267ab6ce9

Files

5c266baac1d61a50a3ac79e267ab6ce9
.exe windows:5 windows x86 arch:x86

44e7af86d13bd689602e96dccc077d31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemDirectoryA
lstrcatA
GetModuleHandleA
ExitProcess
MoveFileExA
WaitForSingleObject
GetModuleFileNameA

user32

CopyIcon
SetSystemCursor
LoadCursorA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 356B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ