d5ab2a1ce3d28700295df5ff8c4fe719 | Triage

Sharing

General

Target

d5ab2a1ce3d28700295df5ff8c4fe719
Size

480KB
MD5

d5ab2a1ce3d28700295df5ff8c4fe719
SHA1

65c0ec7b8e5ad03b9d08d6b7b4472cac8d4d159b
SHA256

5104359a002a4e619f4ee961990482c3ec027a76a59e6f3cc21c0144a9559ccf
SHA512

9ecd48df74e3c286de7d283c49b0f651765484839f141179f52ace5139b52b18aad6cfdccfc2b9fe78830772e7d892a3dfb6f6e69ddfde236e8329fdbc1435b5
SSDEEP

12288:ZQFsUXdxC8uzOMF/EJF7ez0jN7VfHmCkSdVGCgm:qVGOI/EJFV7VfGCk2/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5ab2a1ce3d28700295df5ff8c4fe719

Files

d5ab2a1ce3d28700295df5ff8c4fe719
.exe windows:4 windows x86 arch:x86

428c7d335a294e6c1f9cbb56cd971efd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

ZwQueryVirtualMemory

kernel32

SetConsoleCtrlHandler
GetCurrentThreadId

user32

GetFocus
GetClipboardSequenceNumber

Sections

.text
Size: 477KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE