5a797991d1732776c8fae7b0beed1fc2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a797991d1732776c8fae7b0beed1fc2
Size

76KB
MD5

5a797991d1732776c8fae7b0beed1fc2
SHA1

c14e37e5e8ed4ac86fdf49a4e74b3166129abb35
SHA256

32ffcccce7800ab31561b64234ba52ab19149e3078000476a5d7710daa044f84
SHA512

87479e4583109fefb7fe818528ef377612a65e707e7538070125efb04ef3d750036bce9f3c27d940b213ba985232a086bb6b5ebde4b4b88bc15735f11fa0c6df
SSDEEP

1536:qhD24mGLtuRvS+grKI67Zphds8WhZ+Rpb13lo10pjVrs2ryrd1vUQuq6:qUYMVShrKVjcjZqVlxHs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a797991d1732776c8fae7b0beed1fc2

Files

5a797991d1732776c8fae7b0beed1fc2
.exe windows:4 windows x86 arch:x86

a8702db9af51c8b59a6398254b89c373

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesA
WaitCommEvent
SetConsoleOS2OemFormat
ReleaseActCtx
ConvertThreadToFiber
CreateSemaphoreA
SetLocalPrimaryComputerNameW
FillConsoleOutputAttribute
GetConsoleCommandHistoryLengthA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE