0005aef028468e9836c7d0881b61f730N[.]exe | Triage

Sharing

General

Target

0005aef028468e9836c7d0881b61f730N.exe
Size

56KB
MD5

0005aef028468e9836c7d0881b61f730
SHA1

5206b569ea1553cdc1a16ac34aec172e6ac4b2f8
SHA256

6f317a7fd26b0aa16b81d2bcc7e155f535aa6cc08d31dd33d0e542dca523e11a
SHA512

073cdb0cff7c95a80b10d422d08759e294e6b0d35bb92f5ca594ca5546bc230edfa4cd4957db2986e5e2acd3eb864034072ea7d35985ab67da1e7c65338cb168
SSDEEP

1536:xJdVrO+s4Pb8j6DUQAo90NR28DhAWO4FMAoob:/dVA4P06oQAhcoAWO4FMAoob

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0005aef028468e9836c7d0881b61f730N.exe

Files

0005aef028468e9836c7d0881b61f730N.exe
.exe windows:4 windows x86 arch:x86

152ed0e6746157a1a78a75613d4bace4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleContext
DosDateTimeToFileTime
SetCurrentDirectoryW
GetLargestConsoleWindowSize
GetCurrentThread
WritePrivateProfileSectionW
PurgeComm
EnumLanguageGroupLocalesW
FlushInstructionCache
FindFirstVolumeMountPointW

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE