5ed822ddb353fa0b6e42abfac48dcb40N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5ed822ddb353fa0b6e42abfac48dcb40N.exe
Size

63KB
MD5

5ed822ddb353fa0b6e42abfac48dcb40
SHA1

d1add403c254e9f6148f92fcde99415cd99144e1
SHA256

9ef33b1a01977af7dbd974d3383502bbb00ad590ab57bbb703ccb2aa4d129699
SHA512

fd03a5dcb7e7ab0df41a0182fb523fef81a258237c4d30f505ab35512bf453918eec78f693f0cd5b06a935283eceac17e4edba9f9624bc0481d0bd3fc9d16b17
SSDEEP

1536:J+v8hkM4/PEQ8pQghaehK95BfFXUsVovpN+QntfRt2:Qv8h740y2i9rfFXUsavpN+QntfRY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5ed822ddb353fa0b6e42abfac48dcb40N.exe

Files

5ed822ddb353fa0b6e42abfac48dcb40N.exe
.exe windows:4 windows x86 arch:x86

0d14dbcba53918780af8e1b795a48c1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
GetConsoleTitleW
InvalidateConsoleDIBits
ReadConsoleOutputW
FindNextFileNameW
DeleteFileA
BackupRead
DebugActiveProcess
EnumSystemLocalesA
RemoveDirectoryA
TermsrvDeleteValue

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE