5ea6148fba131f52e5a7d30904daac10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ea6148fba131f52e5a7d30904daac10
Size

67KB
MD5

5ea6148fba131f52e5a7d30904daac10
SHA1

58da555010d2edd679d43c20e28dca2d48c65c55
SHA256

55e79ac9a38aea8a2a30ffd7e1410b3ec5a98ad777d35140e65192aa92c0ac79
SHA512

e2b625d8b48bb586cd4211d71057aa89e5b1948b6eb7e02a91ed23fe9c0433184fe08d4892827119ae74a3956c6eb0a1a0e5d3c8621b3f211008da96fc5ace51
SSDEEP

1536:tIWOTYzr690jbdbo6PSWWKja6WtqqXT+COXTDkVpUpK:KWOTv90jb2lLKjaJtqyTKsVWK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ea6148fba131f52e5a7d30904daac10

Files

5ea6148fba131f52e5a7d30904daac10
.exe windows:4 windows x86 arch:x86

b8ef4c5125d00b6bca988e3da4573c42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
WriteConsoleA
GetConsoleAliasExesW
SetFileShortNameW
GetConsoleMode
VerSetConditionMask
GetWriteWatch
WriteFileGather
GetHandleInformation
NlsConvertIntegerToString
ValidateLocale

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE