5966bad1cccbd49d9011a79f094c8288 | Triage

Sharing

General

Target

5966bad1cccbd49d9011a79f094c8288
Size

20KB
MD5

5966bad1cccbd49d9011a79f094c8288
SHA1

f27ae13fc4c536d55235ecb055bb8fa2bfed58a2
SHA256

7158305f2809ca0c21b1aa45af21857622de2ad74c1c59a51c2e5b124fe2cfc6
SHA512

da6ae196253e6d5f76818f0f49f7706179b74032458595c4d2e47d6b90bdeeed74a8321ace69f90fc51ecb907a715f2af98843f3bf3e0c80d11d92906ffceddd
SSDEEP

384:ys87db4YeAqZTtfw+yK1oHHEvfbl32kOdNeXAIrsCx+KRHxMWSZWs:ab4S+yKyngB3LOveXAIrs2+ks5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5966bad1cccbd49d9011a79f094c8288

Files

5966bad1cccbd49d9011a79f094c8288
.exe windows:4 windows x86 arch:x86

6774167125e28b4eb5b72e61db726fee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
IsWindowVisible

Exports

Exports

IsHvqetqcq
Rdufkqh
ReadDqnnvob

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.virtsec
Size: 1B - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ