5940d3af444dc64ed9ebba0d5bff7c53 | Triage

Sharing

General

Target

5940d3af444dc64ed9ebba0d5bff7c53
Size

52KB
MD5

5940d3af444dc64ed9ebba0d5bff7c53
SHA1

5d14947bf7be6e8e63dad8597998088fbd0e8065
SHA256

2764d367000ca67eb26e8136bf14e872e4a7547837caf6c960fbf8f6e0fc347c
SHA512

c6b8a2f9a0221a42619303816480d2c4dede9aaa68a3e2a0b6e36bd91b052c970ee643edb218fc1858b2c7e07995ff30cff572c6f0d838c7d42a3d7f495390ce
SSDEEP

1536:LFaFvR8kS7HYGKB9M12tgM/5fPjkrDl9HNS:IFvG94GyMEgMBfLkrD7HNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5940d3af444dc64ed9ebba0d5bff7c53

Files

5940d3af444dc64ed9ebba0d5bff7c53
.exe windows:4 windows x86 arch:x86

c64ccfb00e7d9b4cbe227c278dc62580

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
ExitProcess
GetProcAddress

user32.dll

wsprintfA
MessageBoxA

Sections

.text
Size: 19KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nPack
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE