5cbe4543b6cbffd17a5b75dd788b3840N[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5cbe4543b6cbffd17a5b75dd788b3840N.exe
Size

109KB
MD5

5cbe4543b6cbffd17a5b75dd788b3840
SHA1

53e66609b7d5b6059f4c9e22e1eb006d0234fe72
SHA256

fb7542fda75c1677f21976c40114effbd9719ca158ca1b3e9c2a8f41cda425f1
SHA512

833fe80efa59a500d763c8c3a0445287d1af01c39e2b5a5747d7327ba9591b37cfa68b393515c54ef6347a5ad16cefb68b8732700ce6052606e429a3d9e11288
SSDEEP

3072:DNaCaU2doLIPLNd21KEZZ/df379db1qX:ZaRU2qce1KEZBdz9N1qX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5cbe4543b6cbffd17a5b75dd788b3840N.exe

Files

5cbe4543b6cbffd17a5b75dd788b3840N.exe
.exe windows:4 windows x86 arch:x86

6470cb7cb035b01bbd2f89760dc1bc44

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CompareStringW
_llseek
GetEnvironmentStringsW
CreateSemaphoreW
GetTimeZoneInformation
FindNextFileW
VerifyVersionInfoA
GetFileInformationByHandle
UnlockFile
QueryWin31IniFilesMappedToRegistry

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE