5b77ce2e6dd03eeb3a209b27956ad9bb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b77ce2e6dd03eeb3a209b27956ad9bb
Size

12KB
MD5

5b77ce2e6dd03eeb3a209b27956ad9bb
SHA1

a020ddea4d4a59e371bb69a9cf51a4eca2b0b6a5
SHA256

18da2e04de66fe30afa5afb8f7f9e79e8d6c29e48c17f29972256eec9ad03260
SHA512

c282e094d3b1877b4e5d1535a29d89ca7f1ee9a9fd4ff8faa909b860e7975264694086a94ca8b46cd1d19c32ef20cb9a5fd1fef6da805ffb1c11165381fa14f7
SSDEEP

96:cghRL7LYHM4YwCW4H0ocm6CngPMa71yQtQKQYQ:cWLYs42Tnrg0a7MQjQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b77ce2e6dd03eeb3a209b27956ad9bb

Files

5b77ce2e6dd03eeb3a209b27956ad9bb
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ