5301277adab159c05f467e0d779fd40f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5301277adab159c05f467e0d779fd40f
Size

60KB
MD5

5301277adab159c05f467e0d779fd40f
SHA1

b18a71d5f45cadb9a32493b0d2d15f073cb9e5bd
SHA256

d49576c8ed03b6f24c25f8e6f305db9549452e836e1fdc6b8ee3c97ad192dcc7
SHA512

5f09964338cd8f7699ff601855a075206cd094abb62562fd0faefa2117990f4d426514265687a74da01dbe05d3750e37537bd4d82ae0ea5dadf32436f1af6cf4
SSDEEP

768:2olBWUodVRc9dwwJqMUMVzayy7rsbP4IF6m3k2YHvCfmqnVaj1fVca5:XidwuwPU+Wt3sLZF6m02uCf7VuVt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5301277adab159c05f467e0d779fd40f

Files

5301277adab159c05f467e0d779fd40f
.dll windows:4 windows x86 arch:x86

d27d9b827b05c3c42b23ff09ba730df0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleInputExeNameA
CreateIoCompletionPort
GetLocalTime
GetConsoleAliasExesA
ConsoleMenuControl
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Bbekqumlsgy
ReadVccyeohwh
Bpxdslmno

Sections

data
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ