5b29b0e953f0919c12456093b75b4bf6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b29b0e953f0919c12456093b75b4bf6
Size

75KB
MD5

5b29b0e953f0919c12456093b75b4bf6
SHA1

188b94477443ddb6d6cf568b430862308d1cca77
SHA256

7c43cb5edbf1bfa69885370c4ca6f788f2c88a02cdbf42a749182059443c41d9
SHA512

3d798d37f1f783f75cb3652150715a3bc2e49b30538e227a6663ef7109330fd4659374332d900dd03ae06093579a1687780ef8dfaab3ad4088c06509b752fbc6
SSDEEP

1536:DTG7HxmEkbRE1pyRlFFQ35qoDyHMoSeAbU5bZx2HAyjcOvlHumtAs:DTGlmEeRE1pyFFU5qoOgub72f4O9umKs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b29b0e953f0919c12456093b75b4bf6

Files

5b29b0e953f0919c12456093b75b4bf6
.exe windows:4 windows x86 arch:x86

350722337ad50f23c0800f7992492535

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterConsoleVDM
ReadConsoleInputA
ClearCommBreak
IsValidLocale
CreateIoCompletionPort
GetStringTypeW
QueryPerformanceCounter
Sleep
MapUserPhysicalPages
WriteTapemark
SetConsoleOutputCP

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 61KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE