5977292c816e936e826fa292243e88c8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5977292c816e936e826fa292243e88c8
Size

37KB
MD5

5977292c816e936e826fa292243e88c8
SHA1

bc5f06558c4e0408ad7794574eedb9d3d6f95a1d
SHA256

ba8ef98258c33153597790f7ad6aadfe2b3c95783a69ccd44fb1704dff521847
SHA512

5793d221e3d21c589303dfc32838d76445eb9b9716dc39a6575a875ed5051cddf7d2c438efcbf59a34820194dd2ab945a94114ba7e801cfc887b87111939c945
SSDEEP

768:qO9fVkJBinjk1EvFrgHTPUomKLEiZgvBr6POePUXL:n8Gw1ilmTsom9mgh6oX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5977292c816e936e826fa292243e88c8

Files

5977292c816e936e826fa292243e88c8
.dll windows:4 windows x86 arch:x86

12e0b79652a83f77827794815d96d726

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

CancelDeviceWakeupRequest
MapUserPhysicalPages
ExitProcess
SetThreadPriority
SetConsoleInputExeNameA
GetCommandLineA
ExitProcess
GetStartupInfoA

Exports

Exports

Cigwjsne

Sections

data
Size: 4KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 29KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ