5b39ddf98d304303bbd718194ae79c31 | Triage

Sharing

General

Target

5b39ddf98d304303bbd718194ae79c31
Size

33KB
MD5

5b39ddf98d304303bbd718194ae79c31
SHA1

01fc61f28083d606a3167af2680d4116fe63be6f
SHA256

e0842e0caca6abe70f0a10ee742c96c45ff8199a9eaead74f75988cb8f504e0a
SHA512

777d364ab9f9a81248f638c2ccdc24bb7e4c0f76a262d37b56192acde48d4f3000d66c0eef1f3b357e4bdf11440d4a44ee612ac113db73be9be33ded11824884
SSDEEP

384:8q7Sd6iu7fjtCBNeHz5JNedkWyLVb0/t3QXTKE21CzhJctO:Z7Sd6i0jssAXqp0/tCjzjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b39ddf98d304303bbd718194ae79c31

Files

5b39ddf98d304303bbd718194ae79c31
.exe windows:4 windows x86 arch:x86

8daf746ffb72af880e803821aca13e31

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE