b5079a899cf7b375cd1db7c894d6d5cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5079a899cf7b375cd1db7c894d6d5cc
Size

45KB
MD5

b5079a899cf7b375cd1db7c894d6d5cc
SHA1

806373cc2b7d73c2a61b8a91b0db402278c81646
SHA256

11d71f901e710d2e44e34debb2d5c95166e1e28a02f1fd25d474f90864f39396
SHA512

d8161c339ed98e99f768e47167c0af2590b023d1c5d83ad040fe5fedb7d42c70b1348ac7b829e5d85590582f16b3d7742e43f75d9921ec5dbb92079b8e90a23e
SSDEEP

768:GyTE+A40WX7Vw3qYqmYe085a03bWaxnK3RV2GX5MT8z6m4DgCijfVKVpeUtAeV:fqD07K3Gu5a0LWgYyTcF4n8VKVHV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5079a899cf7b375cd1db7c894d6d5cc

Files

b5079a899cf7b375cd1db7c894d6d5cc
.exe windows:4 windows x86 arch:x86

bd51a645a9c68bd03b2e51586e5cbdcb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA

Sections

.text
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_TEXT2
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE