5987225d86258bed79d3f6ce54ed2119 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5987225d86258bed79d3f6ce54ed2119
Size

64KB
MD5

5987225d86258bed79d3f6ce54ed2119
SHA1

1236b35dcefdeb05b56432c76c19d9a44f71a0c2
SHA256

12f72699a62f16d2dfbe5299071001946b1cb19fbdd2ae931cbca205d953d996
SHA512

3ab94223274faa1e0f169d727d05e83c14503ee9795f9a79d0319f9a1ca36fb1192ed64fd48485a6af3f4217bb1a1e36a1aff289e8677fee59c0afe5126c4e95
SSDEEP

1536:Cp2bEyHcrfmUxUKn1a7sPltEUMW0AjUSYVlBu:CEbkrPUKn1agtt/dxUSZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5987225d86258bed79d3f6ce54ed2119

Files

5987225d86258bed79d3f6ce54ed2119
.exe windows:4 windows x86 arch:x86

1872d09f33cb96df619fcaea44c37945

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
GetStartupInfoA

msvcrt

__CxxFrameHandler
_exit
_XcptFilter
exit
memset
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 754B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 308B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ