5b2ad2b93e88b4743221e28ead12475d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b2ad2b93e88b4743221e28ead12475d
Size

14KB
MD5

5b2ad2b93e88b4743221e28ead12475d
SHA1

ae9ba9a780a20b70c59b981fc1d1a8ecbffd1355
SHA256

7de0b783580f6d366b9e38a4215192f8917e71d7d0f180321a66a32e438578ee
SHA512

e717a067df2f55da30fb66011493f76b784ef187a18b5e8c6aedd87841de9798a3f3b6d839c7ed0ab813cbfb10aa0f677abe0605c9f394aa790e9b9063243180
SSDEEP

192:pE99dLcbPkAQGrL3XVV5Y4qOXQcrgg7UTw6KfyILfylWfqmH7fy:s8LkAQG3XVUAQcrgg7UTw6AlT+WymHD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2ad2b93e88b4743221e28ead12475d

Files

5b2ad2b93e88b4743221e28ead12475d
.exe windows:8 windows x86 arch:x86

cfcf01f060f0130b81790a72f751e1e9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapValidate
CreateFileA
SetNamedPipeHandleState
GetNamedPipeHandleStateA
lstrcatA
ConnectNamedPipe
VirtualQuery
HeapDestroy
MapViewOfFile
GetFileTime
VirtualFree
TransactNamedPipe
HeapCreate
HeapAlloc
CreateFileMappingA
HeapWalk
FileTimeToLocalFileTime
VirtualAlloc
HeapUnlock
CloseHandle
UnmapViewOfFile
ExitProcess
HeapSummary
SetFilePointer
CreateNamedPipeA
WriteFile
HeapFree
GetCurrentProcessId
ReadFile

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ