5a0b4aad5724139c2aae0c633eafad5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a0b4aad5724139c2aae0c633eafad5f
Size

46KB
MD5

5a0b4aad5724139c2aae0c633eafad5f
SHA1

f9b10359f6b755858d9b29ccd17c46f8a8a72d9a
SHA256

253934f8e7579e0ef6a2db10e31d543d180ce5d959edd387a4aabf2f5a6dd124
SHA512

159d94805f59a511ca9ae2bd4abb5f868d95f133d173358e22db3f159f453c158a61f918ddb6200ed32598918dc519e5453db5a49819cf049b3fa863c547df34
SSDEEP

768:TNufJAXktORBz7mBN7jjQsw8bQxrlLgH8Iq7zXlKnHgu/ubQuxmvaoP0+f2B5:Y+RBz7mjQPmcIq7pUHgu/GH2ao8+f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a0b4aad5724139c2aae0c633eafad5f

Files

5a0b4aad5724139c2aae0c633eafad5f
.exe windows:4 windows x86 arch:x86

e88b60dbb89ac75399938f3aec52c479

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleInputExeNameA
EnumDateFormatsExA
GetCommConfig
MapViewOfFileEx
CreateMailslotA
BuildCommDCBAndTimeoutsA
CreateDirectoryA
IsValidLanguageGroup
GetNamedPipeHandleStateA
GetCommandLineA
GetNumberOfConsoleInputEvents
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.rc3sec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rc3sec1
Size: - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec2
Size: 38KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rc3sec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ