5a66d533c40f8807b1f107622232f080N[.]exe | Triage

Sharing

General

Target

5a66d533c40f8807b1f107622232f080N.exe
Size

69KB
MD5

5a66d533c40f8807b1f107622232f080
SHA1

c2bce7a5612113019be5d95bdd5cb819672bbb44
SHA256

4ea0176597c37ca9baf24b84a94b10cdc24c88d3a33fa8800a9068607394e07e
SHA512

a40ec205ed5fdb2b4d16aab086dddef63c1118edd8ab06fd77cab91090e750d325a72abdf3f433661f11cb57259dff9eff69f61de9c5e56cc55a41d4aa244b46
SSDEEP

768:sXuzKmOHnvgn+tOXRMFaIEj+POhVtMI3szUZNzxqcter8rqFeANF1ls:u0K/vgn+tB94vDzIUTzxqc8cqlnHs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a66d533c40f8807b1f107622232f080N.exe

Files

5a66d533c40f8807b1f107622232f080N.exe
.exe windows:4 windows x86 arch:x86

4031e5d49f34c1eef26fe2b91cee7b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
GetCommandLineA
GetModuleHandleA
LoadResource
LockResource
SizeofResource
ExitProcess

user32

CreateWindowExA
DefWindowProcA
DispatchMessageA
GetMessageA
GetSystemMetrics
LoadCursorA
LoadIconA
PostQuitMessage
RegisterClassExA
ShowWindow
TranslateMessage
UpdateWindow

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ