5581b7f8d4703690045631860db82db1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5581b7f8d4703690045631860db82db1
Size

62KB
MD5

5581b7f8d4703690045631860db82db1
SHA1

8ca119c172f5fd8907d594a3fa4dda0722fee235
SHA256

79bfc4c7b839759131b9568d2a492a0fbfd70fb0b662604d141840a43e19d104
SHA512

8e171db7748e63c8bf47309aa89fa44d2aa5d477e7ba7ff42f74ab433fc538ea012c5812066b04a1b3d1c821ea810fd7a4a45ad1dbca342c4b9286feeec8b84a
SSDEEP

1536:ME2rhch23qTd6OnyMV0U+OD6AII+Fj8bznAWJ21941:bWShQq5kHODdJuEznms1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5581b7f8d4703690045631860db82db1

Files

5581b7f8d4703690045631860db82db1
.exe windows:4 windows x86 arch:x86

7210fd42fa3dd6089b747ecf09910f53

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ConvertFiberToThread
SetThreadLocale
RegisterWaitForSingleObjectEx
VerLanguageNameA
GlobalCompact
HeapAlloc
SetStdHandle
GetVolumeNameForVolumeMountPointW
GlobalHandle
RegisterWowBaseHandlers

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE