5931a364dcb90bb2faba83d39db4d5b7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5931a364dcb90bb2faba83d39db4d5b7
Size

56KB
MD5

5931a364dcb90bb2faba83d39db4d5b7
SHA1

614ae32082194c5d224408f9a1e7c15f0d5a8044
SHA256

4f1e460d3443fd0eb59e023df31a39acac650f2533f85a9c0ce9116606ff44b3
SHA512

96c219074118f3165b6dc367ea3a99e764e1bc4cc011df56b70ef34df02b5f8012615a648013510b686fad28a3081f7ed0d2ca0ec2fbc7894abc508f92c7cf87
SSDEEP

1536:RmBsLO23SluV+3jzgVnc1O3SYdKGCiIOkeIJYUYp:RHxSluVzc1ILAGCiseIfYp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5931a364dcb90bb2faba83d39db4d5b7

Files

5931a364dcb90bb2faba83d39db4d5b7
.exe windows:4 windows x86 arch:x86

f4c69389ee4227e15779fe40660d3551

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenWaitableTimerW
EraseTape
lstrlenA
InterlockedPopEntrySList
GetTempFileNameW
GetConsoleCommandHistoryW
GetCurrentDirectoryW
FindAtomW
OpenSemaphoreW
RegisterConsoleVDM
ExitVDM
GetNumberOfConsoleFonts

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE