5cb9f950ee830fc5b6b5bb2eb157b96f2d41973bb2ca604937f8b564da1b1af0 | Triage

Sharing

General

Target

5cb9f950ee830fc5b6b5bb2eb157b96f2d41973bb2ca604937f8b564da1b1af0
Size

20KB
MD5

5d974ac0f0b23bea9722afcc29dffcad
SHA1

68c9504ee8d4eabfe043490b0be640b3e5b9a33b
SHA256

5cb9f950ee830fc5b6b5bb2eb157b96f2d41973bb2ca604937f8b564da1b1af0
SHA512

59aa7dce1140dc112b2ccff8f1b505b2017ea8f318da5e43e9722618de728de8a44335fc97089642071999c665d1e86cea0e5592f181af8d0e929d8444ff9a78
SSDEEP

384:aICYQ1sE6lmELjZGNgA/1aqmEgPthDoc7FbMW7vcEqowPl/5pDGkzZ9Vj:aI9Q1sE63GNx0EgPthDoc7FbMWX3+/qE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cb9f950ee830fc5b6b5bb2eb157b96f2d41973bb2ca604937f8b564da1b1af0

Files

5cb9f950ee830fc5b6b5bb2eb157b96f2d41973bb2ca604937f8b564da1b1af0
.exe windows:4 windows x86 arch:x86

a4ca0c88d5183bbd19f2cbe61c907973

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId
ReplaceFileA
GetSystemDirectoryA
AddConsoleAliasA
SizeofResource
LockFileEx
GetProfileIntW
LoadLibraryA
GlobalAddAtomW
VirtualFree
MoveFileWithProgressA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE