5406704b754614b7976929bf3fc5b09d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5406704b754614b7976929bf3fc5b09d
Size

115KB
MD5

5406704b754614b7976929bf3fc5b09d
SHA1

ea896649dd9a073e5f9826719105a67036f3580f
SHA256

72365baa53e4db5f2ae3bb974793b31ed85e192eb224143d2c7e0ee92d8191c5
SHA512

9e0aeac7d615182793da5c1229e388506cd7e65509adef4ab1142b48c758dbd94532720b24615fa4a914d30d8eb62dca99b1f999ce45a4398f299c525070b89b
SSDEEP

3072:P9DbOl2dWjYTUfsDCsWhNsmHoLykE/TWxC:w7YYf66ToLgWA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5406704b754614b7976929bf3fc5b09d

Files

5406704b754614b7976929bf3fc5b09d
.exe windows:4 windows x86 arch:x86

1ade8fe1a229873c614991b6eb211359

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
ExitProcess
GetProcAddress
LoadLibraryA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsdat
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 511B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE