5b52e5368763727b308934870739bf45 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b52e5368763727b308934870739bf45
Size

92KB
MD5

5b52e5368763727b308934870739bf45
SHA1

8e5eb8d710882eb325869cc82771ecb44df70b51
SHA256

19fed011e13b9e9a41120d06c8f722b1659a165f44ec7f932db120313bbfbd5e
SHA512

c7ed2d97fb5a1ac5a8d993c0ca912c83741d72e666d0d097b1fda56ec6b08d2c383c127a7381a350233e309509fa2faad1741760b6bfc7edfb1767ed56d90dfd
SSDEEP

1536:9j0BMUVcD1LvwkJ0BJABVma100imQ1g5wGTZ83YacIyP/69QAq0Gb8/Z5H83oKz:QI10kJ0Inma10Pm35wGtKYBbWq0GQP0j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b52e5368763727b308934870739bf45

Files

5b52e5368763727b308934870739bf45
.exe windows:4 windows x86 arch:x86

3c40fd5fa07a4cc9038549256564260c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32First
GetConsoleWindow
GetSystemWindowsDirectoryA
GetCurrentConsoleFont
_lread
GetSystemWindowsDirectoryA
SetThreadLocale
WriteFileEx
GetConsoleCommandHistoryLengthW
GlobalFindAtomA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 36KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE