5df1bb052c1a3db26bd3ca715a61fc472138e9788aec13806871a220d4ff4979 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5df1bb052c1a3db26bd3ca715a61fc472138e9788aec13806871a220d4ff4979
Size

6KB
MD5

e3bbf1b1b9b51e81176284df76c0ebf0
SHA1

79beca4b6495322d1c48a77501a43adf42caf373
SHA256

5df1bb052c1a3db26bd3ca715a61fc472138e9788aec13806871a220d4ff4979
SHA512

ca889259dad5995f46e964b7e05b1e6395f33225c6f7755753bd57efccb17dcb4b006e485147cd995705f2b861543fa22770836dd94086295eb3edea72a697f1
SSDEEP

48:Ss3bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9u+:tr0mIGnFc/38+N4ZHJWSY9FI5Wqox

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5df1bb052c1a3db26bd3ca715a61fc472138e9788aec13806871a220d4ff4979

Files

5df1bb052c1a3db26bd3ca715a61fc472138e9788aec13806871a220d4ff4979
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ