5a67b4512e3352b868e7a9f11f690d1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a67b4512e3352b868e7a9f11f690d1c
Size

31KB
MD5

5a67b4512e3352b868e7a9f11f690d1c
SHA1

be21a89b009fd2090a6306af85dfdc85754cd455
SHA256

4fb46c58a69c100058de80d7901279fbdc4815b3ce42864f80de5cb8a1d3f069
SHA512

18196404e1c9eb102c3f3bd4b4d9232d4962ebd5a91251825c73138942f15401dbecf982c839ccb8f6d42fbfd67645cd820f8c9a3d3b853a4309bb2563cd5584
SSDEEP

768:2J+uCQA/ZiOQhtpUOh0bLsLK+K8IxCSeg4Ht:/uOWNhcLsLK9xX4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a67b4512e3352b868e7a9f11f690d1c

Files

5a67b4512e3352b868e7a9f11f690d1c
.exe windows:4 windows x86 arch:x86

5c8eb4970bd5e14f6ffbe7f4d8fdad6d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
CreateProcessA
GetCommandLineA
GetModuleHandleA
GetStartupInfoA

msvcrt

malloc
strlen
rand
srand
time
memset
atol
free
printf
_exit
strcpy
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_XcptFilter

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ