51ac1e6802e6aa2e242814feb1b1e136 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51ac1e6802e6aa2e242814feb1b1e136
Size

23KB
MD5

51ac1e6802e6aa2e242814feb1b1e136
SHA1

4ad06cfb42be8a433fdf5084ef423a7b7d4072be
SHA256

bc8f7b845e01422ebe3af79b0e14f19bbae6ebb1b15c69a47b41ffa0d0da5c7d
SHA512

91f11fa62d8e7c5a27d44c2bbf5cea4d446b067ff79f7a8b11406360f8491aa6a077546f45150c94b5aa9a588918772908299894ceb17e8b5776e14e15b5790c
SSDEEP

384:430R1wIY3a1GOicx4d5FItvB/hoWbDu5Wm2Db5kZ3MHbJJ6W:4kRaqgOm5F2ZZoW3uYm2DbqpM7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51ac1e6802e6aa2e242814feb1b1e136

Files

51ac1e6802e6aa2e242814feb1b1e136
.exe windows:4 windows x86 arch:x86

39c87c5cea161696eacaa4d7cdc6a324

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

select

kernel32

GetMailslotInfo

user32

MapVirtualKeyExW

gdi32

ExtTextOutW

advapi32

RegCreateKeyW

shell32

ShellAboutW

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 50B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ