5bbe8b5a958ec51d61973cf38196eea2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bbe8b5a958ec51d61973cf38196eea2
Size

3KB
MD5

5bbe8b5a958ec51d61973cf38196eea2
SHA1

7455c3e400a09a7d8b9339a14bcb5747aeb46c9d
SHA256

98cf022405e42329a76bd04d00f789350bb2cd2f96498e16422dd10cb5de07c2
SHA512

0b3d2b7029c5bde3fcb201a1c5ce51a870d15d77ab997c574e5e8d14fa1ba1e270c405ec5c7a5ee31aad9533612672a77f578369257777ac9afceb857ad63a66

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bbe8b5a958ec51d61973cf38196eea2

Files

5bbe8b5a958ec51d61973cf38196eea2
.exe windows:4 windows x86 arch:x86

26929006cc8d1e53cefbb91369e4f82d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

strlen
malloc
memset
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

kernel32

CreateProcessA
CloseHandle
SetUnhandledExceptionFilter

Sections

.text
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ