b5f0aaef00ccfcc2872d4482e3bad40f | Triage

Sharing

General

Target

b5f0aaef00ccfcc2872d4482e3bad40f
Size

71KB
MD5

b5f0aaef00ccfcc2872d4482e3bad40f
SHA1

02cc40a22f15bfb9635f0b235ab0ba823b95b957
SHA256

d02a1d12b6bca65d58a3766b3b1458dd696725eb60f12d12d226e92b922a0de8
SHA512

203c1e37a2485e674c7aef39d72745d7af27a4382558484022b908dbb5bd086637151ebb022e2197282b00268a93e06164b8d013412c1a8f85cce2577f856b0b
SSDEEP

1536:weWP9f5c7G2G5nr3OxGaXeGFdQT4VVC1aCHP+DR/5v2di/sgz:2P9f5c7G22OxGaXeGFdQTMVC12X/sgz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5f0aaef00ccfcc2872d4482e3bad40f

Files

b5f0aaef00ccfcc2872d4482e3bad40f
.exe windows:4 windows x86 arch:x86

9c8decf3582072f6edfc385a689f44f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateDirectoryA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetCommandLineA
GetFileTime
GetModuleHandleA
GetProcAddress
GetSystemDirectoryA
GetTempPathA
GetWindowsDirectoryA
LoadLibraryA
lstrcatA
lstrcmpiA
RemoveDirectoryA
SetFileTime
VirtualAlloc
VirtualFree
WriteFile

Sections

text
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 14KB - Virtual size:

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE