b5799ef89d5564ada0348cbf15825b5f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5799ef89d5564ada0348cbf15825b5f
Size

1.9MB
MD5

b5799ef89d5564ada0348cbf15825b5f
SHA1

1f944c97202e0a8e646f1c10d70b4e7d1fc4d273
SHA256

232d97c042c48f3abc245f507645204bcb774f26250ad6206fe01667b2d302a5
SHA512

bac9ace458cd906865c1e44c28e4ad0192111ef06dd65bdc76f9e7922706c7c0fef2a048fb40c55d5a76dead893755f42331f0b43dd9bc8097761da39d834ec4
SSDEEP

49152:HijPDBHgUowI4zOKIGzZq0dKzLcixET1OkI50qkfidpJawr:HADtgUowIgIAZq0d2AixEoa5ca

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5799ef89d5564ada0348cbf15825b5f

Files

b5799ef89d5564ada0348cbf15825b5f
.exe windows:5 windows x64 arch:x64

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 513KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

cnlvmyau
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lmpnbvwa
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ