b5a8b7adee4240af31660b6987f7d702b7c3de561f2742dc7c7ebf9bf9d20e65 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b5a8b7adee4240af31660b6987f7d702b7c3de561f2742dc7c7ebf9bf9d20e65
Size

63KB
MD5

23e8959d85aad1996f5db0e05caafe4c
SHA1

64fd6f51fcb4d570c845477a8ce75d2d2a019757
SHA256

b5a8b7adee4240af31660b6987f7d702b7c3de561f2742dc7c7ebf9bf9d20e65
SHA512

3fdb7b5358f8153131608550cb701f9f9accce674762e94307e88686ec40eb83929cd5188979f295da96cb742bd0ebc066283f36b7493e87c7d414bd95140c1d
SSDEEP

1536:z5cvjjJ++pHwXEa61XMZCeEn7AxBRAZqVAKzALppjc:z5eJ9Hwo8soECAKzAde

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5a8b7adee4240af31660b6987f7d702b7c3de561f2742dc7c7ebf9bf9d20e65

Files

b5a8b7adee4240af31660b6987f7d702b7c3de561f2742dc7c7ebf9bf9d20e65
.exe windows:4 windows x86 arch:x86

ac5fafc94bedc791d5c2d67ee19795d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileStructW
IsBadCodePtr
VirtualFree
LZCreateFileW
CreateRemoteThread
LocalShrink
GetEnvironmentVariableA
GetConsoleAliasW
GetPrivateProfileIntW
lstrcat
GetModuleHandleExW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 63KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE