d5b04a6d2905a11236caacbb32439b70N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d5b04a6d2905a11236caacbb32439b70N
Size

62KB
MD5

d5b04a6d2905a11236caacbb32439b70
SHA1

c8f8c91af6973dd37c348b8781a7cc35a81dcc4c
SHA256

6b9f0cd677d1d1f194f9ea736833627e565a6c2a834418c55ca283299e647bf0
SHA512

f732d8449cf8088b124948ba6921040cc7e92f82369bf58b67d1205e9df4af7e992d74d301376743fcab7233aff886097fec88a65996505378cfee85da3268cc
SSDEEP

1536:v6NOAOAFHE3egrxJ1kynnL+v6JvD8Y89Re1W0+:v7dAnUxphvloRe1W0+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d5b04a6d2905a11236caacbb32439b70N

Files

d5b04a6d2905a11236caacbb32439b70N
.exe windows:4 windows x86 arch:x86

152d59f2af356eb9de3bb55bcdaa0825

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileAttributesW
CommConfigDialogA
FindResourceA
GetCommandLineW
SetLastError
FindFirstFileA
ValidateLocale
FindFirstFileExW
IsBadStringPtrA
GetConsoleTitleW
GetConsoleProcessList

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE