c5110d34b70d30f6c0b738e8e224cfc1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5110d34b70d30f6c0b738e8e224cfc1
Size

92KB
MD5

c5110d34b70d30f6c0b738e8e224cfc1
SHA1

5c5854c0df9563ff6645d0918df17c6301bd7710
SHA256

774d48b47d4562be3b6807b693d0c16ee188eaeacf475f998ecf3e3eda73651f
SHA512

e31b7b81c84b84786eaaeddef17eea4ef58c2a1d611b0fafb88c1853d5ee8dc20b0f519d0f6ce391b26b4c485915574e131051f75f30456118c06885b643f6c4
SSDEEP

1536:0CUGBze9OARlRJ+fMiwvzRGBAek0YunqZTddfG7:0CU+APyMiGzAOekruMBd+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5110d34b70d30f6c0b738e8e224cfc1

Files

c5110d34b70d30f6c0b738e8e224cfc1
.exe windows:4 windows x86 arch:x86

fa568827163a29bd5f5b148b01a347b2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
CloseHandle
ReadProcessMemory
SetCalendarInfoA
GetBinaryTypeA
SetSystemTimeAdjustment
LocalFree
SetMessageWaitingIndicator
ReplaceFile
EnterCriticalSection
GetConsoleAliasesLengthA
GetProcessShutdownParameters
SetupComm
TlsFree
GetDiskFreeSpaceA
GetCommandLineA
GetStartupInfoA
ExitProcess
WriteFileGather
ReadConsoleInputA
EnumCalendarInfoExA
GetUserDefaultLCID
GetNamedPipeInfo
_lclose
ReplaceFile
MulDiv
SetConsolePalette
GetStringTypeA
GetConsoleAliasesA
GetSystemDefaultLCID
VirtualQuery
FindAtomA
GlobalDeleteAtom

Sections

WEIJUNLI
Size: 4KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ