5b536b85286db147ca71a2bfd66500b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b536b85286db147ca71a2bfd66500b7
Size

14KB
MD5

5b536b85286db147ca71a2bfd66500b7
SHA1

499619de1523fc240da91fa5f0ab2b1d324f664f
SHA256

77e8d7524715a2880e572eba4a215a9d0477a75e80b6c879e12086b51681b844
SHA512

c4ae12ef80f9f40319bb6179c14acce2ca10d81fdaa437c8802de7eedbd9318fb2c6452d1c076de5d42b11aa8dd590afc7cbb31fad35ac2f0c26e49b594733b2
SSDEEP

192:D2gW9vhRJFp17mmjfZHdhRGapQh1fg2vzm3Dp5A45GwW8FYW7KJGI6CJ6K+:D29vhRzu6R3RGkiTm3mwdFY0KsIRJ6K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b536b85286db147ca71a2bfd66500b7

Files

5b536b85286db147ca71a2bfd66500b7
.exe windows:4 windows x86 arch:x86

51b2dbf6281079a082225b6210266206

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
IsBadCodePtr

Sections

.text
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE