5986c2206b853f58fa66d9e834c4e3397c1b2f5033453c9d65678484a05d5374N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5986c2206b853f58fa66d9e834c4e3397c1b2f5033453c9d65678484a05d5374N
Size

337KB
MD5

f1f4d717c36e5f4a6faeffe2a872d180
SHA1

da701fdd2988c6e3c5ae04107524a3b1e708cd5c
SHA256

5986c2206b853f58fa66d9e834c4e3397c1b2f5033453c9d65678484a05d5374
SHA512

2e73e042ebe6699df58d762ea47ace7a6ff72510df99e39f4fe4d346c8926ffc0f9ac95983815808699165f08b9502a4ca3b337bd9ee3daf940558b67fce2ceb
SSDEEP

6144:+1S6/l864a4Lq/MR94qefJg8swRgfsVDqj4G0xlzK:KS97LqkbCC8swRrDqj4Vxlz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5986c2206b853f58fa66d9e834c4e3397c1b2f5033453c9d65678484a05d5374N

Files

5986c2206b853f58fa66d9e834c4e3397c1b2f5033453c9d65678484a05d5374N
.exe windows:4 windows x86 arch:x86

e9e0703a1e4b3c222bf5314308c0b52e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenThread
ExitProcess
OpenFile
GetFileType
CloseHandle
ReadConsoleW
GetProcAddress
GetModuleHandleW

gdi32

GetRgnBox
GetClipBox
GetPixel
GetMapMode
GetMiterLimit
SetPixel
CreateCompatibleDC
FillRgn
GetRelAbs
SetBkColor
GetTextFaceW
GetDeviceCaps

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ldr
Size: 180KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ