5a7e0311b312361618cb4f896d0e1a3e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5a7e0311b312361618cb4f896d0e1a3e
Size

6KB
MD5

5a7e0311b312361618cb4f896d0e1a3e
SHA1

a60fe0b04400b3261947ad696608a2a72c945811
SHA256

78f4302254b20c866f2a182bc8f9d2eb1de9a20adedbc5f69741dd385e920382
SHA512

b363a3d211a0628e445843e3746dec99012d6a264262e92ca7b4f411dbb74b479c158a290e88dff7fdc1e867fbeede6f485492f4adbbcf84dc467ab3dcf43039
SSDEEP

192:QrptwxJGMJAMLDP+VZTIc1LeE8gWyrehWSQ:QHwxZK0yVZTP5evgVR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a7e0311b312361618cb4f896d0e1a3e

Files

5a7e0311b312361618cb4f896d0e1a3e
.exe windows:4 windows x86 arch:x86

dad08cfed9523b84fa44bb6bb5531630

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

Sections

.text
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE