5b1700512f78ac57fb3ea59f76dbd428 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b1700512f78ac57fb3ea59f76dbd428
Size

228KB
MD5

5b1700512f78ac57fb3ea59f76dbd428
SHA1

467f603a06fc9d684a4086fb5e1129b31e2bfa4e
SHA256

20f0ba612cee5f8f9773fcaf6155a7d8a8efd00b90359b60cf64323c0b9b376f
SHA512

e5917ca3f760de34656dc06205dc14cd1fd9e4876f0ff1ad3bd79634f72805bcbe1931ca9b6fa517d2bcd50e8fc0d56f89944e63ec036a5de5dfc8c32395bbe9
SSDEEP

6144:NR/xAq0lZdWw7dCff5gXmsdPN8Y/0PqM41tzoeRNPb1:NR/1UbWwwf5kW+0PqM4DF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b1700512f78ac57fb3ea59f76dbd428

Files

5b1700512f78ac57fb3ea59f76dbd428
.exe windows:4 windows x86 arch:x86

bb1445fa3e7d869245ebcc0125564d9b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
VirtualAlloc
VirtualFree
GetCommandLineA

user32

GetGuiResources

Sections

.text
Size: 512B - Virtual size: 502B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 230B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ