5f99b9423e5a47d6573f7f9bcaab4ca0N[.]exe | Triage

Sharing

General

Target

5f99b9423e5a47d6573f7f9bcaab4ca0N.exe
Size

66KB
MD5

5f99b9423e5a47d6573f7f9bcaab4ca0
SHA1

90aac72d0465d42ff3a2899296c63bac481b7b18
SHA256

e5cc75f20d622ee2f14b9fd9e671cadb94d666f326a16b6ccc5e0dd6caa400aa
SHA512

91a0fb00a235ed459a9c94925602332caaeeb5cf3c89d63e701113682b5e2f78edb33b46e9c8814b1c5c01ddc363dc8ee6474ebb3fbc38208b7073907c7049fd
SSDEEP

1536:0OPEJEHMKmnx1YWMb6En953P3Vm0EK6aOcrjdx9L:HQFx1ynn9VP3VmdK6aOYj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5f99b9423e5a47d6573f7f9bcaab4ca0N.exe

Files

5f99b9423e5a47d6573f7f9bcaab4ca0N.exe
.exe windows:4 windows x86 arch:x86

4798daad0c6ff637a45ffea61186f0c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
LZOpenFileA
SleepConditionVariableSRW
GetStartupInfoW
SetThreadErrorMode
GetPackageApplicationIds
SetLastConsoleEventActive
CreateHardLinkA
GetThreadIdealProcessorEx
InitializeCriticalSectionAndSpinCount

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE