f5d9b4476d57fde9b99e7e27d7341abc3c194c5af6ff19dfac9b6cf213ff3479 | Triage

Sharing

General

Target

f5d9b4476d57fde9b99e7e27d7341abc3c194c5af6ff19dfac9b6cf213ff3479
Size

988KB
MD5

6e1b1929f6df01c4db6cc3c7232f1ba9
SHA1

5fed3cc39a5b5e51f7e4f3f1cdc77b2b4462b63f
SHA256

f5d9b4476d57fde9b99e7e27d7341abc3c194c5af6ff19dfac9b6cf213ff3479
SHA512

f8c6d8c5af5a6f4ebc19817c2356d959ac95933747c85844429a6e7c0599e3f554ac70d115dc9da0a14875822791ab87fa7d49e1491e24bf64d8b78851c065c5
SSDEEP

12288:Wh3ZukLF5fRY5a/6GX4D1DwhHd1zre/9CL7zf0RhQ2K2cgicWPTMTH:WhMkxlRSaiPDi3qs3m/rIcWrQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f5d9b4476d57fde9b99e7e27d7341abc3c194c5af6ff19dfac9b6cf213ff3479

Files

f5d9b4476d57fde9b99e7e27d7341abc3c194c5af6ff19dfac9b6cf213ff3479
.exe windows:4 windows x86 arch:x86

8c8cd2fe8f466202b9cc82f6156dad3c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesExA
HeapDestroy
HeapFree
HeapCreate
HeapAlloc
GetProcessHeap
CloseHandle
Sleep
ReadFile
SetFilePointer
CreateFileA
QueryPerformanceCounter
ExitProcess
GetModuleFileNameA
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
IsBadReadPtr
lstrcmpiA
FreeLibrary
GetStartupInfoA
GetModuleHandleA
HeapReAlloc
GetCommandLineA

user32

wvsprintfA

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 722B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ropf
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ