a1ba0e6993945d540d4bf17181a692fdb344b294fdbca8b9577386bf46835842

General

Target

a1ba0e6993945d540d4bf17181a692fdb344b294fdbca8b9577386bf46835842
Size

10KB
MD5

aa98a15d0c3739e4c922e82cc0dca87d
SHA1

8d110ef0bc7c043c95c7b2e2104c756614d5290e
SHA256

a1ba0e6993945d540d4bf17181a692fdb344b294fdbca8b9577386bf46835842
SHA512

95dd10f9f05902a1899df852c3c9df5012f90741422bc66422fa7ddf06cf32bd85add890852d5ce3239530bc69a62a9f9d4174ba6ddf636ccd4c75ae1ea86496
SSDEEP

192:R344j2j3BOnhVVeZn9QefdzSAd0pUKCbEJpvD8Oo2KDzi:R4VEnhCZ9DrbsD67z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ba0e6993945d540d4bf17181a692fdb344b294fdbca8b9577386bf46835842

Files

a1ba0e6993945d540d4bf17181a692fdb344b294fdbca8b9577386bf46835842
.exe windows x86

419fad899e85c15c5b7e92ef8d015f63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess

vcruntime140d

__current_exception
__current_exception_context
memset
_except_handler4_common

ucrtbased

__acrt_iob_func
__stdio_common_vfprintf
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 908B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

419fad899e85c15c5b7e92ef8d015f63

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140d

ucrtbased

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 908B

.reloc Size: 512B - Virtual size: 376B

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 908B

.reloc
Size: 512B - Virtual size: 376B