5b4e009153e7557c4a9f5a1e15884ca7 | Triage

Sharing

General

Target

5b4e009153e7557c4a9f5a1e15884ca7
Size

52KB
MD5

5b4e009153e7557c4a9f5a1e15884ca7
SHA1

f1668955d422776d6cdef69afff68795d98ac815
SHA256

a86f355d1b058c95e51095362b6d81ae1eabf22ad231db37afdfb6553ce3a26b
SHA512

7f9fc65ef7709fc150c37e05cd38c29e098fc4e9dc5bbdca37c2648c971d3bc899bdc0f49c39df5edba466b5fa23a5aefc2bf70cd6fd996ec3713342d703e261
SSDEEP

768:11nTSP8aACKLlpxKqkYSP3jar7ea7y41GIdY6pCLX6+llbp9G26q34tUC:1hJHCIxKqkYq3jaXe2y41hdupXjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b4e009153e7557c4a9f5a1e15884ca7

Files

5b4e009153e7557c4a9f5a1e15884ca7
.exe windows:1 windows x86 arch:x86

95660af44761675c59482e49fd25d059

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_WDM_DRIVER
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryW
FoldStringA
CreateEventA
CreateWaitableTimerA
SetFileAttributesW
GetProfileStringA
CreateJobObjectA
GetVolumeInformationW
CommConfigDialogW
GetConsoleInputExeNameA
FindFirstChangeNotificationA
SetConsoleTitleA

user32

LoadBitmapA
GetClassInfoExA
SetMenuItemInfoA
SetClassLongA
DialogBoxParamW
GetWindowTextLengthA
SendIMEMessageExA

gdi32

CreateMetaFileA
RemoveFontResourceW
GetCharacterPlacementA

Sections

.tls
Size: 49KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 1024B - Virtual size: 764B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ