5bfee13b29c8d5dd3ca59e0e657bb9fe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bfee13b29c8d5dd3ca59e0e657bb9fe
Size

98KB
MD5

5bfee13b29c8d5dd3ca59e0e657bb9fe
SHA1

5bee452e118a98ef0f54142da992a4bc9bce68fa
SHA256

fd66a95c3848e7b75bfe892d56fd12d0c70d81b591eb2dd3206fe114cf596c3f
SHA512

bb503b217a4ef0977c78a891d7ae5c4539f10cf742c86f5ec38a838eef3a5cd063dab3f3b4ab242501ab7774d55c79601f4a2e826cfcf6667818b9b44e52c499
SSDEEP

3072:BYmzYM0KXunLMQfNeWq50WhBaNT0HBNonLPYo/w:5xuLMQYWGamBNKQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bfee13b29c8d5dd3ca59e0e657bb9fe

Files

5bfee13b29c8d5dd3ca59e0e657bb9fe
.exe windows:5 windows x86 arch:x86

3a40481fdbfd1e19c36cd9e2a5f8283b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetProcAddress
LoadLibraryA
EnumResourceTypesW
CreateNamedPipeA

user32

CreateIcon
TrackPopupMenuEx

gdi32

LineTo

advapi32

IsWellKnownSid

Exports

Exports

nuubtmneefqasbz
qewkgxmcv
rxmxvhcthwd

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 586B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ