5a8c521c84e294786bdb3b03f5474e98 | Triage

Sharing

General

Target

5a8c521c84e294786bdb3b03f5474e98
Size

1.2MB
MD5

5a8c521c84e294786bdb3b03f5474e98
SHA1

7ab85e324d59f9871fd7d979ed89887a57f6439e
SHA256

434ea60da27974443283607abcc6a63b380b66fb8632ca5c16eb230082d0dc99
SHA512

fb8adaca9160263182a90c25b3495143dd4f0979766f59ec1df99f26091e220b3e2e225908ee90f15df49cb3fa8f8896ab61354e625a5b5242ab5e38525df2dd
SSDEEP

24576:BHzLTZmGJeMYQWmh5jEmqk+wCgbuDw1VTdoXoQHPFcpR:BHlNjEmb+w+wPoomWpR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a8c521c84e294786bdb3b03f5474e98

Files

5a8c521c84e294786bdb3b03f5474e98
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Exports

Exports

createInstance

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 37KB - Virtual size: 1020KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE