5a674ab145a29dd7b3dee559ae622b4f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a674ab145a29dd7b3dee559ae622b4f
Size

11KB
MD5

5a674ab145a29dd7b3dee559ae622b4f
SHA1

e9a49ba99dc26e8b1238f8c30862ac836fecfb60
SHA256

98d011177462b5b6c73abcd3d57a8d8177ae20369216a42675a0c0afc156a8fc
SHA512

284ff2adc8ca850c246a0a34846237fb0f8021999a391fc9458054585659bd2a7682af726702490884f292cf2d7c8146fd35d051877361a458a7720487b02532
SSDEEP

192:nN1TRUmrgL7tx8pXkZVr6CBuYoMjZJvmdC:NbU1BxD09kLN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a674ab145a29dd7b3dee559ae622b4f

Files

5a674ab145a29dd7b3dee559ae622b4f
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

Arg1
Arg10
Arg2
Arg3
Arg4
Arg5
Arg6
Arg7
Arg8
Arg9
CallDLL
Finished
Firstbp
Patcharea
Prepatch
WndProc

Sections

CODE
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MSA
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE