5987db500b5a06ac6f0c81018bf4a103 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5987db500b5a06ac6f0c81018bf4a103
Size

72KB
MD5

5987db500b5a06ac6f0c81018bf4a103
SHA1

86bc9c3e0e39803ad99341e37d94348be92c80cd
SHA256

81d60d4bc65bed6e92a06bb1eafcb52b4b5ac1cae4f47f98fc2b37f7c2bdd2c4
SHA512

3a45c098187c84ef41c6972e60c3b50d0673c634c37ab5d197a64cd638e4d6835aecde6a36889fc551c0369a0564ea033e17bfcbdea281e4510665dcffe4957d
SSDEEP

768:FSNpsrsGLl+jDtzfFjMqWNU+KD4FV2gundskZ44:FE1jNFjMqqU+hV2dKk1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5987db500b5a06ac6f0c81018bf4a103

Files

5987db500b5a06ac6f0c81018bf4a103
.exe windows:4 windows x86 arch:x86

bac72c8751822198ac0bb2de460bb2b4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

kernel32

AddAtomA
CloseHandle
CreateFileA
DeleteFileA
ExitProcess
FindAtomA
FindFirstFileA
FindNextFileA
GetAtomNameA
GetCommandLineA
GetCurrentDirectoryA
GetEnvironmentVariableA
GetModuleHandleA
GetStartupInfoA
SetUnhandledExceptionFilter
WriteFile

msvcrt

_fstat
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
fclose
fopen
fread
free
malloc
memcmp
memcpy
memset
setbuf
signal
sprintf
strcat
strcmp
strcpy
strlen
strncat
strstr

wininet

FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 96B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE