5c491a398c0114771605b5a44cb8dedd2bf254889f2b78952cc0c0a87b542335N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c491a398c0114771605b5a44cb8dedd2bf254889f2b78952cc0c0a87b542335N
Size

15KB
MD5

fbec93739365abfea2f75ad8b32a63b0
SHA1

b14b2fd8f0f2e7b29339f087f2f815c463b12137
SHA256

5c491a398c0114771605b5a44cb8dedd2bf254889f2b78952cc0c0a87b542335
SHA512

111b147add2dc4674c545f6f2231363aec37edfaa712e5f5764e13128be29f3a27c8a8ae400c5a243cb0ee4ba3b5a17d834dfdc1ac649ef7f4561fddb337242e
SSDEEP

192:EYbqJOloEPcPfd5d/t10Il41Gczlaac/PcafE5C80s3l+mOepnLNDscuY7jGS:p5loE0Pf/SkChw60EV0KUm/pnLpmYOS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c491a398c0114771605b5a44cb8dedd2bf254889f2b78952cc0c0a87b542335N

Files

5c491a398c0114771605b5a44cb8dedd2bf254889f2b78952cc0c0a87b542335N
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE