f5ec71f1807943a79b3119b05da65b56 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f5ec71f1807943a79b3119b05da65b56
Size

63KB
MD5

f5ec71f1807943a79b3119b05da65b56
SHA1

14f20a7b7c1156fa5171096bb848fbee786b3ee9
SHA256

3e080be740b0e302ac51c53007a46dc4f6d74697e9d3956337605f062fda969f
SHA512

f912f505d020e699300a42eaa82841c54ac69135c657f5dc16b1d2bb958df3fac1b654a590397c4fb53e0d7e720fd4de3e655fe1af638ddd359c8ab3d63626ba
SSDEEP

1536:D2ae3vJ+rxuxyXHYWMWCudsQAQLSdoqKxGpAgoTN:Dl0vw332WfdrUUCHGN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5ec71f1807943a79b3119b05da65b56

Files

f5ec71f1807943a79b3119b05da65b56
.exe windows:4 windows x86 arch:x86

0ab71b12a0b4ba3f8989657bea6c8f9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileWithProgressW
lstrcpynW
lstrcatW
GetSystemInfo
DosPathToSessionPathW
LZInit
FatalAppExitA
IsDBCSLeadByteEx
GetCommandLineW
VDMOperationStarted
FindResourceA
AddAtomW
GetDriveTypeA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE