b5df2ba0d0a528734e591d52cda0df6f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5df2ba0d0a528734e591d52cda0df6f
Size

87KB
MD5

b5df2ba0d0a528734e591d52cda0df6f
SHA1

12de3aedb9e00ce0dff198cd72d8e984c8cd9bdb
SHA256

e17b63b8b6b708758b8be2d0459489df31ca742a6b21bbf7e6dc00ff24f91bec
SHA512

6fa43364609e7c904c3018f5a4e1ae936fae033cc1a8b340b9161c1f598ff0cdc4a16224771ebb6c807be71d4c829f8cb986fd6ba886f69f53b8c140ceb60bea
SSDEEP

1536:PgYGu9A4vmtXkNjJKVCjVGQe490PcGtlOQwbR6isD:IYZ9YEJKVQX0BMmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5df2ba0d0a528734e591d52cda0df6f

Files

b5df2ba0d0a528734e591d52cda0df6f
.dll windows:4 windows x86 arch:x86

7dc6eb9641e38fa82b2c6b2fbbd6fcf9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ms.pdb

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
MoveFileWithProgressA
FillConsoleOutputCharacterA
CreateTapePartition
Beep

Exports

Exports

vsukt

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 452B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ