5ba5c0d5ca760b500600849aad55ffec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ba5c0d5ca760b500600849aad55ffec
Size

224KB
MD5

5ba5c0d5ca760b500600849aad55ffec
SHA1

31d96de561398bce0c66c4395e9789c81c1e7f4b
SHA256

b0a256cca5749cf78de4bff027557274d430d54ee5f443bcf5f8a5a67d919dea
SHA512

7a55cc8fb34174184d16ce70e72cc6980fe8796d030f1a7f7835e1a9b3417e9723fa2f7ca1582f120b920b2fcc8d066ac0ad8eb9a199f0498ee656b88661aafb
SSDEEP

6144:4KLLLm/E+gazhC+O7Xo3pyWxih+Xfi6ylttH5:4KHLm/JgA4XuhBX6935

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ba5c0d5ca760b500600849aad55ffec

Files

5ba5c0d5ca760b500600849aad55ffec
.exe windows:6 windows x86 arch:x86

439ff53323e9506db8654c0d8af9cf37

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnumTimeFormatsW
GetConsoleOutputCP
GetLastError
GetModuleHandleW
GetProcessHeap
GetStdHandle
HeapAlloc
HeapFree
LocalFree
VirtualProtect
WideCharToMultiByte
WriteConsoleW
WriteFile
lstrlenW

ole32

OleUninitialize

user32

LoadStringW

msvcrt

malloc
memset
towlower

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 765B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 648B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 156B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ