5d8c0ebb6bfb53217e2623a7329e7e83ef4727595cbb6267d62a1632ed21608b | Triage

Sharing

General

Target

5d8c0ebb6bfb53217e2623a7329e7e83ef4727595cbb6267d62a1632ed21608b
Size

6KB
MD5

e164b76a7481defa6a5e0096b323b993
SHA1

983f983f99c18f96f66a73a3e2b7581a9063176e
SHA256

5d8c0ebb6bfb53217e2623a7329e7e83ef4727595cbb6267d62a1632ed21608b
SHA512

d4cd0646c1069ebb1a5025a7360947b094c774a3d20883b097cc89736598d6ab0c4762e9990797f6ec62dfcc82bb7cb698f4ba71fb71da6c34684761a3092ff6
SSDEEP

48:S53bt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uO:I0mIGnFc/38+N4ZHJWSY9FI5Wq4x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d8c0ebb6bfb53217e2623a7329e7e83ef4727595cbb6267d62a1632ed21608b

Files

5d8c0ebb6bfb53217e2623a7329e7e83ef4727595cbb6267d62a1632ed21608b
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ