5aff10d331f30e745a5a0cfba521d34d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aff10d331f30e745a5a0cfba521d34d
Size

132KB
MD5

5aff10d331f30e745a5a0cfba521d34d
SHA1

688e9d442056723902083152a6cc73990ac85a9a
SHA256

20da1c924c5f57b96649e48ec5dbc2221b1b7c98e8b88a274ede3811ae434827
SHA512

9e50c7b5761bad43aee823706ebe6837ab14a34beb2f41b7150316a2642c6fc02f1c4003dc7e360e3c94e9ce4286b810f6e5e5e35a4234f800f4ae5b015e75bc
SSDEEP

3072:Z5HfCnZu13Q7Ytl/hx1MKQ6Wwpkl0Hz0wo9YEBOmvtuWB/gsz:HfCnZZkplb9pDHPo9YmC8gsz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aff10d331f30e745a5a0cfba521d34d

Files

5aff10d331f30e745a5a0cfba521d34d
.exe windows:4 windows x86 arch:x86

232c016b1f294a86b687e35475f4c56e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_atodbl
__unDNameEx
_clearfp
_control87
_ctime64

shell32

SHGetDiskFreeSpaceExW
SHGetUnreadMailCountW
SHFileOperationA
SheChangeDirA
SheGetPathOffsetW
ShellHookProc

Sections

.text
Size: 89KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE