b5832e9e07efa9ed720ea30d56592e364df137eeffb96f667800956dae46c0a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5832e9e07efa9ed720ea30d56592e364df137eeffb96f667800956dae46c0a8
Size

66KB
MD5

61aa3d496657c757a92c8bafd8268845
SHA1

82b9f2426241b6dc929fb65f4675626e4bb53941
SHA256

b5832e9e07efa9ed720ea30d56592e364df137eeffb96f667800956dae46c0a8
SHA512

8394d883e39dff68d614335e6ddc5949af60010c25836c2fc067e7390fa81fa2741a527599a7e122b60bb831a27400133f3ee0f0d434cb673e395b22a9a7b4a2
SSDEEP

1536:1DGPQTKWImua1Y+LtS1ntbKwZmGxnj5HeKhqJuiLS7v4:1DIhsuay7HKexj5HNqJunA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5832e9e07efa9ed720ea30d56592e364df137eeffb96f667800956dae46c0a8

Files

b5832e9e07efa9ed720ea30d56592e364df137eeffb96f667800956dae46c0a8
.exe windows:4 windows x86 arch:x86

de2937359049d3fdabc7c98722f21de2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TryAcquireSRWLockShared
SetThreadpoolTimer
SetFileBandwidthReservation
GetHandleContext
GetConsoleAliasesW
LocalShrink
SetConsoleScreenBufferSize
SetEnvironmentVariableW
UnregisterWaitEx
FindNLSStringEx

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE