59295485f3d9e5cb7c1a2bba1cfca01d612195318405c77e660dd95baf3e1a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59295485f3d9e5cb7c1a2bba1cfca01d612195318405c77e660dd95baf3e1a8a
Size

6KB
MD5

4ecdece4311acbbd89732ad6496b854f
SHA1

b6eee9c259be9e4e9cc033fdbaef2c05785c69c6
SHA256

59295485f3d9e5cb7c1a2bba1cfca01d612195318405c77e660dd95baf3e1a8a
SHA512

60116e6ab4425cbeb7250a332d9288f1ad1f1599ec05de41d6d144909cabc725e7e015862acb03ae01c42b0b0909731dac9f01f0175b77f76a1964074eb9c12a
SSDEEP

48:SAbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9urO:B0mIGnFc/38+N4ZHJWSY9FI5Wq8x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59295485f3d9e5cb7c1a2bba1cfca01d612195318405c77e660dd95baf3e1a8a

Files

59295485f3d9e5cb7c1a2bba1cfca01d612195318405c77e660dd95baf3e1a8a
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ