5b18b89c0d47da5722499b1bffc88f2162f8780e4bf53c7d0272652d88dda62a | Triage

Sharing

General

Target

5b18b89c0d47da5722499b1bffc88f2162f8780e4bf53c7d0272652d88dda62a
Size

6KB
MD5

78ab6c52e0506d1f8eb439f811c09670
SHA1

67565842f8a2945bcd32990231bfc65d80bbfe55
SHA256

5b18b89c0d47da5722499b1bffc88f2162f8780e4bf53c7d0272652d88dda62a
SHA512

1141307801e8a9df448b57f3107f3c3229abc339ec1598a87fb1b46f1068f0ae6424c820c0fec3c554a1c9fb7267283cd83022a779ce89a4e07832e686b231b9
SSDEEP

48:SNbt0S4FVgCp471Ib4Fc/38+N7DYocHa23WlTpebVetFygFI5a2oxdVoZiG/9uLO:Y0mIGnFc/38+N4ZHJWSY9FI5WqEx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b18b89c0d47da5722499b1bffc88f2162f8780e4bf53c7d0272652d88dda62a

Files

5b18b89c0d47da5722499b1bffc88f2162f8780e4bf53c7d0272652d88dda62a
.exe windows:5 windows x64 arch:x64

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 790B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ