5b3f07af5138ee47ca57f6c3033a37714f0826245976155678df6eec1ac5cea1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b3f07af5138ee47ca57f6c3033a37714f0826245976155678df6eec1ac5cea1
Size

6KB
MD5

a38d6a8d5982cf1feb0d0679fe82d07e
SHA1

ba91cd5745ad23476f57a18c6d51373e031f1595
SHA256

5b3f07af5138ee47ca57f6c3033a37714f0826245976155678df6eec1ac5cea1
SHA512

143d87e6d179b05adc2c2042ef8a4e6c0af48375ec4a60bfad4bc234f6691c6994230900264b975122eb971b8772410588f26ef89770cd9503f5bdf17d51160e
SSDEEP

48:Srbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9ucO:m0mIGnFc/38+N4ZHJWSY9FI5Wqtx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b3f07af5138ee47ca57f6c3033a37714f0826245976155678df6eec1ac5cea1

Files

5b3f07af5138ee47ca57f6c3033a37714f0826245976155678df6eec1ac5cea1
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ