5d5040faf8809cff017d6e539af9bf1d15f158601c1873be83206ac393287f7cN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5d5040faf8809cff017d6e539af9bf1d15f158601c1873be83206ac393287f7cN
Size

26KB
MD5

a424b40088507c84e700694337ecf740
SHA1

33f8d04a864c0ab1861270215b229ca473c577c0
SHA256

5d5040faf8809cff017d6e539af9bf1d15f158601c1873be83206ac393287f7c
SHA512

22b3f1224ac2fa863fed50e3ad87094abd819193b4f5f1d95087971e513b5406b0bf5b42a8ea91fa12b6656fcd66c816a9fcc362dc3829b59e9425facf648e51
SSDEEP

768:Erz03d6NG429R3bcv5Dim896PpUkBAfejqg:EM3dgG42Jba5OB6P7AfW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d5040faf8809cff017d6e539af9bf1d15f158601c1873be83206ac393287f7cN

Files

5d5040faf8809cff017d6e539af9bf1d15f158601c1873be83206ac393287f7cN
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE