c5906c1f36a46c391a711074d10396bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c5906c1f36a46c391a711074d10396bd
Size

116KB
MD5

c5906c1f36a46c391a711074d10396bd
SHA1

6bcac54d0923054e7e18863f4c9470d58f36d275
SHA256

b840bdd5e584747446946ceb1957c8cc85c366be1051c5819a991feaa567ce62
SHA512

aff866f991d6fd8cfb7626873357b11803b3528bd54a8713a709076e837a0a8933e48c4de4e3d7f027a3eedc8849b34950000dcc2f7f23890815c65bea351ed7
SSDEEP

1536:t4nwU/IgDSUZn6mG3YyLaExw1V11zFbJ55xG22dUhXR+q3R+3mWLJ4yBhPOGPyit:lRySaEx4V/zFlTxvbhidZDPV/B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c5906c1f36a46c391a711074d10396bd

Files

c5906c1f36a46c391a711074d10396bd
.exe windows:4 windows x86 arch:x86

5d26f433fde6b2c36263bd10b5e8c4ed

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
LoadLibraryA
WaitCommEvent
GetCompressedFileSizeA
IsBadCodePtr
CreateMailslotA
GetCommConfig
OpenFileMappingA
GetProcessHeaps
GetStartupInfoA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ