5e0e68b7dbc0bc6cd4f2e29321021978 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e0e68b7dbc0bc6cd4f2e29321021978
Size

101KB
MD5

5e0e68b7dbc0bc6cd4f2e29321021978
SHA1

85718c7cf4d1c40d1d6ac7af927c5038a6ca53df
SHA256

763a007bee7a072bd9e5beac9bcb1934b258f3ee1a2e765e36d45d9e7e0a0ae2
SHA512

6897e1ce97dbc22de6568d21e70fbc40dd6393a7b2c65ca88e1e493719f55cdf120a967734817d042016f44253b00ee438457906781d266dfea94d5d41fba54c
SSDEEP

3072:IHZoTWiIyhD6EuGf7sHwTL/Fk8jwaaHw7Koj4r:oZOWidRZf7sHK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e0e68b7dbc0bc6cd4f2e29321021978

Files

5e0e68b7dbc0bc6cd4f2e29321021978
.exe windows:65535 windows x86 arch:x86

9e8d7b892fde2f016bfff3a9f787a655

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
CreateFileA
VirtualProtect
GlobalAlloc
VirtualAlloc
SetConsoleOutputCP

advapi32

RegConnectRegistryA
RegQueryInfoKeyA
RegFlushKey
RegEnumKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 60KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE