5aec680bd15b812b9ca286394243f5d9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5aec680bd15b812b9ca286394243f5d9
Size

468KB
MD5

5aec680bd15b812b9ca286394243f5d9
SHA1

f442b8ce314a092690c3674f1b51c79ebe7c72fb
SHA256

01bc09aedaa2eb6b339f625239d2e0f357fe0fdff65f4932c3cc41b151288245
SHA512

4d8ff2bc6d22a6182520647ef5262d04f090f375bd46d8a344ec6f3acb6cc1319e6b2003a2acec0e4bfdf3a29f6e5fcbf90805a873786958bf3f272d04558b7f
SSDEEP

12288:UCrV0nU0FgvPwoOOgDeeHPadGgQag9olTNuxqJnDsnrA:trV8U0FgvokeHPadGBfxqGr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aec680bd15b812b9ca286394243f5d9

Files

5aec680bd15b812b9ca286394243f5d9
.exe windows:4 windows x86 arch:x86

dab5b8452b19e7ec529d5c2bfad7cd16

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwReadFile

user32

GetMenuCheckMarkDimensions

kernel32

GetSystemDefaultUILanguage
GetUserDefaultLangID

Sections

.text
Size: 459KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 143B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE