526c036edcdff17fcf988e7ee2fda44d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

526c036edcdff17fcf988e7ee2fda44d
Size

63KB
MD5

526c036edcdff17fcf988e7ee2fda44d
SHA1

bb7173fb2fd4caa402059522f97f3f9a08a1b9bf
SHA256

d8f06b4912cafcbdb62e99976aa8b4764360f671ef3696b52fe1901c0ee6f3f8
SHA512

dafe39e48b2c105888d63e8960324d6605bfb5720e21953cc19695baca0d6d4b869b2a147201aa7d28c84bea0b6efeb20e83670fba6307ec949370572f00eeec
SSDEEP

768:5bFl8CLR5G37YHP7M0SO9aCxWo1zVGKX64Thxw1oPDz7y/k+m8iZYDLp4BVar9mo:5bH8jUHz4O9zxWoJXe1b8kOYDiVar9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
526c036edcdff17fcf988e7ee2fda44d

Files

526c036edcdff17fcf988e7ee2fda44d
.exe windows:5 windows x86 arch:x86

b650d69ba2eb49af97c57821cf08461b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA

user32

LoadIconA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 430B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ