5993dca968265043a82a79c3eb478af5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5993dca968265043a82a79c3eb478af5
Size

22KB
MD5

5993dca968265043a82a79c3eb478af5
SHA1

3be0c2f9cad8740ac253b64dc52e444b15472e97
SHA256

e869ce666a2887d916b8393ede97d0e78be285630595e3bdb18757c00b73ff1a
SHA512

f2e362d191af9c71a0bb0922f7acd126f136ae5c7a5c51078e707d4e84a6fb5fbe16a2f4c7fc8ec03855e74cef14213240d524fbe1111c3ed7669d45483672e7
SSDEEP

384:9g2JsMNgLzW0SIWvzYyW3nCXAOFojG+HJMx/4I671IVbfrcgjRMhlxb2nUEjXW27:xSMaJWkJCXAfo4vpIVbfIgKlxb2nHGWf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5993dca968265043a82a79c3eb478af5

Files

5993dca968265043a82a79c3eb478af5
.exe windows:4 windows x86 arch:x86

d3a008f4f08a505723cdb1f0aaf0d3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
VirtualAllocEx
GetProcAddress
LoadLibraryA
VirtualProtectEx
GetThreadContext
CreateProcessA
GetCommandLineA
SetThreadContext
ReadProcessMemory
ResumeThread

user32

GetDC

gdi32

SetTextColor
GetTextColor

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE