5913b8eb19ab2f0fed941f92b5183ec1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5913b8eb19ab2f0fed941f92b5183ec1
Size

6KB
MD5

5913b8eb19ab2f0fed941f92b5183ec1
SHA1

5f04cb1fed2b584ddfe558888401616ec76a6d9c
SHA256

f4eb413594acf9abc06c97f1901d3589a1ea78a62c74ff8d33a5102dffbbc3a8
SHA512

2b65e2f669fdec4d4ba1c67605a58089d96050f722c7b464ff409c68ead7092e4f1dfa212bfa2a8e447e63021c8efa1f23895dcee59100c2ca3cd5f05a973b8f
SSDEEP

96:/EgnrGokkNp+yF2WUqiSyfGaKrBM3mKdja91kXSAk7w4XLbf+/:lnrGaF2WUqtyfwBGmKdKSXSN7Bbbf+/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5913b8eb19ab2f0fed941f92b5183ec1

Files

5913b8eb19ab2f0fed941f92b5183ec1
.exe windows:4 windows x86 arch:x86

c7bb6519f83212b70252222bc8d794b2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetCurrentProcessId
lstrcpyA
ExitProcess
GetProcAddress
CreateEventA
Process32First
LoadLibraryA
CreateToolhelp32Snapshot
CompareStringA
lstrcatA
RtlUnwind

advapi32

RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 828B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 596B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE