665213023d53a9711cfbf8be297f8100601875bff2fec71e02ace2f709d1968d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

665213023d53a9711cfbf8be297f8100601875bff2fec71e02ace2f709d1968d
Size

5KB
MD5

2ff11101303042616c016b02aefbca20
SHA1

f19e14b072a9b1a8243cbc4caaf7ba8f351c60c4
SHA256

665213023d53a9711cfbf8be297f8100601875bff2fec71e02ace2f709d1968d
SHA512

499cff83389e984e3bbd49a72b60852544b820d8f77ecb43df55b4fc4c39e4cb6e6850774ceceeb344103152822afeb87ff24f880a290b281e7bc0c5a3307509
SSDEEP

48:SdlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tZRuqSxp:KWLkFfNnOKYloIQ2pm2pbYSfxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665213023d53a9711cfbf8be297f8100601875bff2fec71e02ace2f709d1968d

Files

665213023d53a9711cfbf8be297f8100601875bff2fec71e02ace2f709d1968d
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ