5fcd375076eb4c9be983f8aa48d8761d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5fcd375076eb4c9be983f8aa48d8761d
Size

764KB
MD5

5fcd375076eb4c9be983f8aa48d8761d
SHA1

43cf538da026a22c19937bbf85444495e7b2554a
SHA256

c6489b25fe35c96c3568275dc98339e5d268ced14b1f8f11c306c19a8ce9dfeb
SHA512

d99425e2e9c17ee0e60fb9b4273c7bf60a084b46fbaa66ac39dea64ebde9173d536a5bce0cbab02c2fb3ca8ce0be5b125f3810777cf53fb01f23d1b22d40a691
SSDEEP

12288:erGAf3fdMHt9jdZDYVfjSKYh4Fy38mnf70mhWOZuPX0MY0XA2iHHisEBrGCu:uGAf3fdMjfYxVY2F4flAB0MYdBEB6C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5fcd375076eb4c9be983f8aa48d8761d

Files

5fcd375076eb4c9be983f8aa48d8761d
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 762KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE