5f510da03fce31a457d1c90291df5c7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5f510da03fce31a457d1c90291df5c7a
Size

5.9MB
MD5

5f510da03fce31a457d1c90291df5c7a
SHA1

a3e8a447948580fd9aa124e3c7409ce18d537615
SHA256

5c3d218da055f4d89b667502711a69d268abbb83c80906a2327a521034dac08a
SHA512

041bec4d99739ba0f1a596bc87ffa93dca1d82a37005de051f7ee5cbb8d420f3b94c31f205d7aa39f715c1e9541f6d7dcee4abadc7e84a862479b4e0b1e351b5
SSDEEP

98304:T/rVCfiXoK9e6K/LIKN/ODenU6h15lHC84w1m6o+sxE/QjnDiZwuEBclWkK76YQI:bRhF9e6KjH/ODQHa36oJxE/UDvuEBGWh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f510da03fce31a457d1c90291df5c7a

Files

5f510da03fce31a457d1c90291df5c7a
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6.6MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ