5699e1ad3db694939759ec7dbcf17b1e | Triage

Sharing

General

Target

5699e1ad3db694939759ec7dbcf17b1e
Size

83KB
MD5

5699e1ad3db694939759ec7dbcf17b1e
SHA1

711df0287b46bc4cfb8bf6cc2dfd44e3ecd7edce
SHA256

6cbfc333c4d299e06ac7c6892e2ac17cb228466e30024c30be8fc094d3ae4a8b
SHA512

8688440933552e0862861f762057dd00bdce7b55950311d121d24461baca2a609cf2ebc1580549ef3776cf697552e04dd81704e49670792b8e0e57a8f84287a9
SSDEEP

1536:FFVVVV0jxM4LGjkSSP25rbCS3fTLfXVAP1FSo8HLRvydQpjVrs2ryrd1vUQuqwcW:FWj7qj0MrGS3fuP1GrRvyGHs2quciu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5699e1ad3db694939759ec7dbcf17b1e

Files

5699e1ad3db694939759ec7dbcf17b1e
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

7bc354cab9ba4be8134f9b5b5f3c42d3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlZeroMemory
OutputDebugStringA
AssignProcessToJobObject
GetThreadLocale
CreateTapePartition
WriteConsoleInputVDMA
SetConsoleTitleW
SetConsoleCursorMode
ConsoleMenuControl
RtlZeroMemory
FreeEnvironmentStringsA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 27KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE