5c2601734c8d22b0d4c2c0fb785ad209 | Triage

Sharing

General

Target

5c2601734c8d22b0d4c2c0fb785ad209
Size

21KB
MD5

5c2601734c8d22b0d4c2c0fb785ad209
SHA1

e324160d93301298a489cacdafc973fe7d3bbd38
SHA256

5b42eb42fcac80f1ed1ec4cb264bfd0a45aa692c75ea24f3a8fb1ad8c335aa17
SHA512

363a06e02e851fc522de420b026ed38bd52a21271d89b0409268a7e5f665d69c8755b8414585f4c7f7f53aaac16ebf31d9962abbd737cd2b6f1ca36e5b184250
SSDEEP

384:YSlgQcaIoqpDgg7SUse81A6PyU6eDbkUHwq05q0KJGG:Ytg7Ua1A66ADbtQq6q0KJl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c2601734c8d22b0d4c2c0fb785ad209

Files

5c2601734c8d22b0d4c2c0fb785ad209
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE