5b2afc04e8b4fc861d2a609f63193703 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b2afc04e8b4fc861d2a609f63193703
Size

25KB
MD5

5b2afc04e8b4fc861d2a609f63193703
SHA1

0ace5e8c28608b83c31a4269c337c28825b5c754
SHA256

44a59f5c732383394946cb49f259a6cfcdecaac6435d3acaaed8a5b69f6ffcc6
SHA512

e453076c16d0fb96b7b7d5b6beb6880e01588e2d8f0d1f8f43849db48554c7adeb11585b29a5e2fbaad53737754e8e197698b9439bd66fe72fdb184a1c38139d
SSDEEP

768:VlwnxlVlgHxexxwKp2hg9z3DfZgVsPghitC+Iu7B3fo0ZZrO4s3j3XjwYu+aol/S:VELWatp2hjZS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b2afc04e8b4fc861d2a609f63193703

Files

5b2afc04e8b4fc861d2a609f63193703
.exe windows:1 windows x86 arch:x86

e2c69898e19633e9830253504d1e2896

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfDeregisterEventSource
CryptGetKeyParam
FindFirstFreeAce
GetSecurityDescriptorDacl
GetTokenInformation

kernel32

ClearCommBreak
ConvertThreadToFiber
CreateEventA
CreateMutexA
DefineDosDeviceA

Sections

.text
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE