5501433afa3d125a05b6e9fe2ca36c81 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5501433afa3d125a05b6e9fe2ca36c81
Size

67KB
MD5

5501433afa3d125a05b6e9fe2ca36c81
SHA1

f3cbd8d456b8a9035d8dbbc3b5ddf8ebda8577c0
SHA256

01e74ec246a9d59283a58f89d6cc63eb4c037620fceaef6b310d5fbc9753f804
SHA512

447c0d01bd660b84f795a718171ff2cf2ea67304ed8a44489c0f7d5a6f1bdb241245ef722070d2e2d927e00f1b490fc0360fe793b54195d7287cb4d6574ea0b8
SSDEEP

1536:TWj7+VEsTCtp8OyezNjnH0XnGVFxGbyhzwBbK:TCaVzTCthNjH0XnGAyhzwRK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5501433afa3d125a05b6e9fe2ca36c81

Files

5501433afa3d125a05b6e9fe2ca36c81
.exe windows:4 windows x86 arch:x86

a61e81bde5bfbfa9db433ac5615ada8a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
ResetWriteWatch
EnumSystemGeoID
GetLongPathNameA
SetCommState
SetThreadExecutionState
SetComputerNameA
lstrcpyW
GetCurrentConsoleFont
GlobalAddAtomA
AddAtomW
GetConsoleFontInfo

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE