5bb60fea878f0700be41716021ac84d0N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5bb60fea878f0700be41716021ac84d0N.exe
Size

29KB
MD5

5bb60fea878f0700be41716021ac84d0
SHA1

1e1d8b74f4ee4011cb10bce6e6498e9a9817cfac
SHA256

13fd02df6d5e6d944ff86625c6fdc0f2fd3a9fafa62ee5e42e4c43be55ded002
SHA512

5d5104e3fd8d01166710b1fbe54360acdf84285fcf3ad335fece6e372dbb37feb8253f5602f10c72585703df066904e41f679d6b63b33cfb88e452ecdf8dfd43
SSDEEP

384:AGNkzd6k6qeGOIuQt50yV3GQhn93MKguGikhscLIFxJEpAI0Bnd0I:A+6lS4N3GQP3XLBgwx6pA7oI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bb60fea878f0700be41716021ac84d0N.exe

Files

5bb60fea878f0700be41716021ac84d0N.exe
.exe windows:5 windows x86 arch:x86

fe487be3ca290bea84564888c7619239

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowWindow
EndPaint
SendMessageA
RegisterClassExA
PostQuitMessage
MessageBoxA
LoadIconA
LoadCursorA
LoadBitmapA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
CreateWindowExA
UpdateWindow
BeginPaint

kernel32

CloseHandle
lstrcpyA
LoadLibraryA
GetProcAddress
GetLastError
GetCommandLineA
ExitProcess
CreateFileMappingA
CreateFileA

gdi32

CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
DeleteObject

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ