05bf0fd2e9aaee7319919e49627e6b16 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05bf0fd2e9aaee7319919e49627e6b16
Size

66KB
MD5

05bf0fd2e9aaee7319919e49627e6b16
SHA1

4abf54e4b4299cfe19deea5b8cad2425e9a2e7c6
SHA256

7152745b1206b1de1075f112df90fd538d442f778a4bcac576784547cc4d183d
SHA512

37e1dff9170bf3845f84ee30fee51de1a21b4d5621b790b1d29ff3ac893e4aba2785b844f1c4abdc4fc2c4284c0ecacb6f0ef3e14a8ff6c137e07ae166f4a649
SSDEEP

1536:ICzBlfQOfpTA9rG9+xRdNeSh0Uuo9oj7hH+lW4SvRvBME:IsTUJG9+xRdQS3uqojlHRxBv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05bf0fd2e9aaee7319919e49627e6b16

Files

05bf0fd2e9aaee7319919e49627e6b16
.exe windows:4 windows x86 arch:x86

e04ea6f7969c008e6a5e9291cfd7717a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
WriteFile
ExitProcess

msvcrt

__p__commode
__p__fmode
fprintf
fwprintf
strpbrk
strspn
wcscat
wcscmp
wcslen

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ