51f9ca50e1c6755ca29510412b2a233b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51f9ca50e1c6755ca29510412b2a233b
Size

315KB
MD5

51f9ca50e1c6755ca29510412b2a233b
SHA1

797a68f83194ff8e6793074443cc5108126b0d5a
SHA256

7177a0a20a7240601f011000ca0716d65c06b01d4981f3c6623757ba5718ae4b
SHA512

b384168dcd0669241b873cda9ec341b608f36ff9f6242ee603b4d7a6218750b819137a0df8fe59ac048bce033fd550ca660955d0eace29ff7d11d5688c7c2bb6
SSDEEP

6144:WuhYpygHYpU5g1wDnday0ZCy6dgE6OI6ZBjBriwynRXm:fhYpdH44g1wDnoy0Ay6yE6r6LjBuwynw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51f9ca50e1c6755ca29510412b2a233b

Files

51f9ca50e1c6755ca29510412b2a233b
.exe windows:5 windows x86 arch:x86

f726bd7f1f33fe7f5b219a2a5b49f3c6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CreateNamedPipeA
GetProcAddress

Exports

Exports

bibmnjfmxa
hhpfygbl
iijpuztxpuwc

Sections

.text
Size: 301KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ