c5b76fe73e687fb53adc1e5a6c3c8bee508645a8bcd1fc81e0b373bfd473f31e | Triage

Sharing

General

Target

c5b76fe73e687fb53adc1e5a6c3c8bee508645a8bcd1fc81e0b373bfd473f31e
Size

643KB
MD5

fb77743fb2868b9084d818d55804b921
SHA1

ce3c82848aa61a60110ca06e7e982472c6e136c7
SHA256

c5b76fe73e687fb53adc1e5a6c3c8bee508645a8bcd1fc81e0b373bfd473f31e
SHA512

553807aac3d9fd50698e25a15d8990ddc92ddad3d493c897a18cbafac8b1529ddde189987ef836d96a76c63dea98f1010a7d1df09f1d03597db105ed2acbf9aa
SSDEEP

12288:YQLE2iG40uBkUqyAHkbSPQ9yKNKDLsGuintEa4Ng5cZAdzJNRX9l7K1xMffYHx:YQY1G4HV7R9suieJg5iA1vRKCfYR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
unpack001/FAT67890000.bat

Files

c5b76fe73e687fb53adc1e5a6c3c8bee508645a8bcd1fc81e0b373bfd473f31e
.zip
FAT67890000.bat
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

yFKj.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ