6005e4518ceafde45ac00af5d67a66e7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6005e4518ceafde45ac00af5d67a66e7
Size

113KB
MD5

6005e4518ceafde45ac00af5d67a66e7
SHA1

8a74b5648e69fa179cceeb1dd2cb5fba8b0e0699
SHA256

f025971f49142b732204145c4cd7c8917cd3f7d3449c111a17e6b60825a13b08
SHA512

ac73527ebe5792284911280ab47b968e4b7ecb49f13372e5b1aa8c13c4e13e58312b7e1ed8ad52f7fd9a13ad1537372569a85e9f627938af4095fe9e5c7f4d7c
SSDEEP

1536:v6OmzXyVDXYhV9lR2qaOnaxNdOn5mVd9EZN11gW3Jk3Yn5:v4zXiDXUlRvFs+5mH9ED1Dr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6005e4518ceafde45ac00af5d67a66e7

Files

6005e4518ceafde45ac00af5d67a66e7
.exe windows:4 windows x86 arch:x86

f21e189749bd822080100f3640bd258f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
EnterCriticalSection
GetACP
GetCurrentProcess
GetCurrentThreadId
GetModuleFileNameA
GetOEMCP
HeapAlloc
InitializeCriticalSection
InterlockedDecrement
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
Sleep
UnhandledExceptionFilter
VirtualAlloc
lstrcmpiA
lstrlenA

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 612B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ