5acde26dc2cf7b1385600fe6f178cd130af76fd0e0daad4b34e6ba3c2bf21439N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5acde26dc2cf7b1385600fe6f178cd130af76fd0e0daad4b34e6ba3c2bf21439N
Size

5.1MB
MD5

e5f1c2fc3ef5cbcbe6a8a6c5a8a55480
SHA1

ce6cb389cac11d2bef58b9dca2633659b936bbb0
SHA256

5acde26dc2cf7b1385600fe6f178cd130af76fd0e0daad4b34e6ba3c2bf21439
SHA512

0f4b6a496c30f618cd3a955334c42ba0ebaf6229cf65e32c7a061c119f0255adcb1bc0152557456b53aec026f0d23a3e2a8425757a4697a3edc9ce9fb4e0c2a9
SSDEEP

49152:wtYhwXCIjuBEMI9tU9dLnCu2uznesUM6CR1dNZJWsS9tU9dk:Z+OzITU9VnCu24bV1dJBSTU9m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5acde26dc2cf7b1385600fe6f178cd130af76fd0e0daad4b34e6ba3c2bf21439N

Files

5acde26dc2cf7b1385600fe6f178cd130af76fd0e0daad4b34e6ba3c2bf21439N
.exe windows:5 windows x86 arch:x86

cbf47572e8cb446c01bd5522c7d7f827

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameW
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
SetEnvironmentVariableW
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
WideCharToMultiByte
GetEnvironmentVariableW
GetVersion

user32

MessageBoxA

Sections

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 82KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE