5bf49a2a344edb120b44ae6b0ad5891245e6a3c46189237b32c9f4b056fa5644N | Triage

Sharing

General

Target

5bf49a2a344edb120b44ae6b0ad5891245e6a3c46189237b32c9f4b056fa5644N
Size

72KB
MD5

1e4d9acc849b60a5088b65d115df1420
SHA1

6a3eee5fba5f91d92e1c3a91a300706dfa16574c
SHA256

5bf49a2a344edb120b44ae6b0ad5891245e6a3c46189237b32c9f4b056fa5644
SHA512

4685a70343767dedc29d61d893304093c1e1093eaf55d8757c3decb7d93b3b94721d21c52f18fd50918d9efcdf53b639087608aece6967f133bfb0daab1de7e8
SSDEEP

1536:x5FNAlTnd+5rO0PxfXZVBZq5qYXMEIcSg:XTAlOO0Pxfznq5zXug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5bf49a2a344edb120b44ae6b0ad5891245e6a3c46189237b32c9f4b056fa5644N

Files

5bf49a2a344edb120b44ae6b0ad5891245e6a3c46189237b32c9f4b056fa5644N
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE