b5898c49160d9ba2fc0fca584e735ae3 | Triage

Sharing

General

Target

b5898c49160d9ba2fc0fca584e735ae3
Size

264KB
MD5

b5898c49160d9ba2fc0fca584e735ae3
SHA1

9c21ce2ca043a77953151213b263ce1b8ea4adf6
SHA256

4e9b668d6699f2303784578d82e92da7411d4e7b7a3a18f0d0d9c4e110fcac89
SHA512

baaeda693f1e780de1251df9c34dc7904278a9a0589c52048de176348376bd69775915fc43bc2c1c2bc1ffaf79fea8555294e171a6c8a62242b165f7654c8e28
SSDEEP

6144:OMH+ph4YY2fvsiEDLMgqdiVn/VqIlSGESrY7YLp:OMeQSnysgAon/flrYgp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5898c49160d9ba2fc0fca584e735ae3

Files

b5898c49160d9ba2fc0fca584e735ae3
.exe windows:4 windows x86 arch:x86

c1f895b242f13b689a0137f5ef773cc9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SignalObjectAndWait
SetConsoleScreenBufferSize
SetFirmwareEnvironmentVariableW
GetDiskFreeSpaceA
MoveFileWithProgressW
ValidateLCType
GetDriveTypeA
ExpandEnvironmentStringsA
GetSystemWow64DirectoryA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE