05fb5208b1f1c0d4d20195c3dfad03b4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

05fb5208b1f1c0d4d20195c3dfad03b4
Size

314KB
MD5

05fb5208b1f1c0d4d20195c3dfad03b4
SHA1

5bfec4d01ebfcb1681b9cfc6f4c63fb4e2227a62
SHA256

84f04c7c59815e70bb773a393dd05f4cdac5adcd9942c0561027b41609a06e5d
SHA512

4f68b68a9a694f31182c224e8dba0cf5c116ab2a0c3863151f7a79e4188915fd21abd2ed392fbe23f5e215c6cf66ff0bce4ef2f7893fcb35ef27a6b52714f366
SSDEEP

6144:xepwjY4jCSVnUpfbI+2it98OdGDWIzbooeWuUewmXRLrGdb1wbjL51VIC1D:gEYYVUhVrtGiGSIIpWQwmXwd2Cs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05fb5208b1f1c0d4d20195c3dfad03b4

Files

05fb5208b1f1c0d4d20195c3dfad03b4
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 780KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 309KB - Virtual size: 312KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ