5bb91802ee1ffea2cdd0ae4e30008d40 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb91802ee1ffea2cdd0ae4e30008d40
Size

63KB
MD5

5bb91802ee1ffea2cdd0ae4e30008d40
SHA1

2e07d7e9eaad3abb65685948558d2fd1c0accf70
SHA256

13fa801670b14b55723b4331c6b4e2ac7d048af0730dde627601d0fbc1c444e7
SHA512

501e09dddd49e45d983ae286f55e889c2c4b507ab5616b50f5f82dc24fea3081519dd058a29644365e5fc090eca845617379b0381ba1fd7172d4becfb85241f9
SSDEEP

1536:4r2GMTV155pqvM4O0PietLZEBXk+b5AhJzh+rk3LvF:EHMTV155EvZPWU+bkJ9+rk3LvF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb91802ee1ffea2cdd0ae4e30008d40

Files

5bb91802ee1ffea2cdd0ae4e30008d40
.exe windows:4 windows x86 arch:x86

9e5c075c9add61893b5a65da38396c39

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VDMConsoleOperation
UnregisterConsoleIME
FoldStringW
GlobalReAlloc
GetFileAttributesExA
FindNextVolumeMountPointW
SetProcessAffinityMask
GetCurrentDirectoryA
GetConsoleAliasesA
ContinueDebugEvent

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE