b5e525998b9bd417d093489c4f53de1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5e525998b9bd417d093489c4f53de1a
Size

54KB
MD5

b5e525998b9bd417d093489c4f53de1a
SHA1

8e8862812926ced95f76d32378fc750f41770f42
SHA256

98508a063e1d6a8a5427ad494678676d23b108db593d949fab1ca76d82c0caf4
SHA512

43dd300e63a5e044f5400abba7d6be6d692b62d4c8826a616f995ba2dcf0f21f33ce72e287c50ee5d785b46c8ddde8d48033935c0c448b5924097ecdb5fd6e6c
SSDEEP

768:1Pa0Lir77PT+ShjVAZOrf6kBg6EFm1L887uSnmMh+vFaHoQNznlG9NqX4d3eZ:15LirfT+QZ6kBg6EoZ6VMh+onnlG9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5e525998b9bd417d093489c4f53de1a

Files

b5e525998b9bd417d093489c4f53de1a
.exe windows:4 windows x86 arch:x86

4c41d0b5a9d05218c926ef138cc4ff12

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleFileNameA
CreateMutexA
OpenMutexA
GetStartupInfoA

msvcrt

_XcptFilter
exit
_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_acmdln

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ