5b2fc2574445b91507851d8188c969ba | Triage

Sharing

General

Target

5b2fc2574445b91507851d8188c969ba
Size

129KB
MD5

5b2fc2574445b91507851d8188c969ba
SHA1

be6a6b52ae7a589b1f1920fdb0d8a7c0131f7be4
SHA256

105fc2c8bba932eec77699b8a86e6055a5cadb9dda50599d375d7db068c30965
SHA512

f34f376a7f18142295edfb8abadcfde8f844af18b565dd22f2407e5991d612a2ec30e8089a4ee3824966b2172978fb66e75951b132b4e98330c73844a85e4cc9
SSDEEP

3072:ldtcM9er30Lgqv9SDzEPNOze1sxdH6Pr1fvIKEdTzuhOChC38usHfJY6En6T2TSr:sE5v9KEPNHsxdH6Pr1fvIKEdTzuhOChr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2fc2574445b91507851d8188c969ba

Files

5b2fc2574445b91507851d8188c969ba
.exe windows:4 windows x86 arch:x86

a16de01030ee86c5847785afeb3ca8d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

wininet

FtpCreateDirectoryA
FtpPutFileA
FtpSetCurrentDirectoryA
InternetCloseHandle
InternetConnectA
InternetOpenA

kernel32

AddAtomA
CopyFileA
CreateSemaphoreA
DeleteFileA
ExitProcess
FindAtomA
GetAtomNameA
GetLastError
GetPrivateProfileStringA
InterlockedDecrement
InterlockedIncrement
ReleaseSemaphore
SetLastError
SetUnhandledExceptionFilter
Sleep
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
WaitForSingleObject

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
fflush
fprintf
free
getenv
malloc
memchr
memcpy
memmove
memset
puts
signal
strcat
strcmp
strcpy
strlen

shell32

SHGetFolderPathA

Sections

Size: 53KB - Virtual size: 52KB

IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 464B

IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 2KB

IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 16KB

IMAGE_SCN_MEM_WRITE

Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_WRITE

Size: 257B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE