5e11aa17789312739af6a37811eb3d51753d6550c6cb6a7e487da703e39394ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5e11aa17789312739af6a37811eb3d51753d6550c6cb6a7e487da703e39394ca
Size

44KB
MD5

ba70d42edffd8a0e5f2379fd9cdafe20
SHA1

1caaeb563bcfd72b97f693dbadd9099e04e4a485
SHA256

5e11aa17789312739af6a37811eb3d51753d6550c6cb6a7e487da703e39394ca
SHA512

78bef1beeaecc9a2ebaf0cd30bdb18ef3579c425d8a2f5e5d803965739f5988300b5a2721bdccdd17b8354874c64f27105a7e15b6756e3cfc73ea0197952b432
SSDEEP

768:dD2oV2AJblQRNLzFrSNTVebqxjxMQhMk6Csl:dCoVXGRTuhBxj/hQl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e11aa17789312739af6a37811eb3d51753d6550c6cb6a7e487da703e39394ca

Files

5e11aa17789312739af6a37811eb3d51753d6550c6cb6a7e487da703e39394ca
.exe windows:5 windows x86 arch:x86

3e262236e65f95b01f5c11555a1db856

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

PostQuitMessage
DefWindowProcW
UpdateWindow
LoadCursorW
DispatchMessageW
TranslateMessage
GetMessageW
CreateWindowExW
RegisterClassExW
ShowWindow
PostMessageA

kernel32

FindClose
DeleteFileW
CreateFileW
SetFilePointer
ReadFile
GetStartupInfoA
GetModuleHandleW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ