6005cb38e54bbdccd5bf463bad031bbd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6005cb38e54bbdccd5bf463bad031bbd
Size

63KB
MD5

6005cb38e54bbdccd5bf463bad031bbd
SHA1

5bc969efd73cb5a50ce1e23986fa652c793032ae
SHA256

4f7db72a6e95acefdc5590f21596e4a071c9886737a4447a728ff7cb422f6826
SHA512

9482727a83c13a7698b79e83b79e0b88a0933067406b43b1f5493fb4cd68f46c9deefcab74c20d14a622bcc0d182898c3f65354717d807ae95ac481b6d5da539
SSDEEP

1536:5c6WdvooK34YTYYUI8xp6/BPYf3oswekQdILas7YIsW:qHvomYHUIwo/sw5QdILasyW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6005cb38e54bbdccd5bf463bad031bbd

Files

6005cb38e54bbdccd5bf463bad031bbd
.exe windows:4 windows x86 arch:x86

e8689c65d5ed0bf3bd5ab81dfa14d978

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorInfo
RtlCaptureContext
CreateEventA
LocalUnlock
GetComputerNameExW
MoveFileWithProgressW
LZOpenFileW
GetSystemDefaultUILanguage
SetErrorMode
SetThreadUILanguage
GetCurrentProcess

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 65KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE