5216fd53ed68733bbfaaf9117dba498b | Triage

Sharing

General

Target

5216fd53ed68733bbfaaf9117dba498b
Size

860KB
MD5

5216fd53ed68733bbfaaf9117dba498b
SHA1

fae526ec0551bff0f8fe9ba0c7feec8a5dd3b81e
SHA256

7152dd020782605ade398ea8cb0e58087da48c6b056f365c6081d9b34583f553
SHA512

72f3f602c43249a500bde458909db6eff05258844db3aa7b3b27126d568eb921a32e8189998f8d9333a1febb34976b7b329c1b0126cd20837a1dbb4bd9f26cdf
SSDEEP

24576:T1BIvMNYx35lfKIMqHnWdOt/ZDShNcLz5BNczxvgo/Hc:TgMNyLyaHWdO9FSh4Oxvf/c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5216fd53ed68733bbfaaf9117dba498b

Files

5216fd53ed68733bbfaaf9117dba498b
.exe windows:0 windows x86 arch:x86

204693aa89ecdf15c4c069c311cb6852

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32

CloseServiceHandle
CloseTrace
ControlService
CloseEventLog

kernel32

GetModuleHandleA
CreateFileA
GetLastError
WriteFile
ReadFile
GetVersionExA
ExitProcess
CloseHandle
GetCurrentProcessId
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
CreateThread
SetUnhandledExceptionFilter
GetSystemTimeAsFileTime

Sections

.text
Size: 289KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 554KB - Virtual size: 556KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 716KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ