5bba3644c6ff35c9ad0b4997cf4052ee | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bba3644c6ff35c9ad0b4997cf4052ee
Size

86KB
MD5

5bba3644c6ff35c9ad0b4997cf4052ee
SHA1

dadc7b5fe3d952a97bdd3062dc5f9aa9c629c61d
SHA256

d8f0ba9f61d162c3989bed42fbb6ccabcabe67c816635952b465f3901197b7b5
SHA512

bf24dd581fb091c9ae28ea51e4dcd8b4e85615471b685ba2191817a7124e7d2e505a3c81bca0f2231edd5a7f8d5dcdda92fff284b4dda085788462420c0c8dbc
SSDEEP

1536:gRCdB7ha2w87cnKx3jOIO7MEzjfvE9VnDVgQgFY01KEwiWRHdsk:1dlhaYx3jxO7Tk6FW/PRHOk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bba3644c6ff35c9ad0b4997cf4052ee

Files

5bba3644c6ff35c9ad0b4997cf4052ee
.dll windows:4 windows x86 arch:x86

a8d728e9704cb696b6617d5e79858248

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

WriteConsoleA
ReadFileScatter
WriteConsoleInputVDMA
TryEnterCriticalSection
FindFirstFileW
lstrcmpiA
GetDriveTypeA
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

.text
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE