53c923c6aeb986f6369696c8a4b8c876 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53c923c6aeb986f6369696c8a4b8c876
Size

2KB
MD5

53c923c6aeb986f6369696c8a4b8c876
SHA1

d490d503a6b34b23809ef0ac7c7040b7520a2210
SHA256

5411af4bfeee82350dad1a1f82483f1ef16087fcf715a33d8c6e1aaeb6cf09d5
SHA512

1309f3664df5e25348ebd2c7ddd72f71719c3c1590a44e02a1f47dc9f92620af05bf55d06c15c9e255ddd9fa8c778fce80c4849c31b81fb3eb9207505b652336

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53c923c6aeb986f6369696c8a4b8c876

Files

53c923c6aeb986f6369696c8a4b8c876
.exe windows:4 windows x86 arch:x86

721f8b89daba3551fa226811be9140eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
CloseHandle
CreateProcessA
lstrcatA
lstrcpyA
HeapAlloc
GetProcessHeap
lstrlenA
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
GetTempFileNameA
GetTempPathA

Sections

.text
Size: 512B - Virtual size: 414B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 11B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ