c1951e186b76a42a2dc3e6f7a556d171d61abddcc87fb47528f969e8b8a74fec | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1951e186b76a42a2dc3e6f7a556d171d61abddcc87fb47528f969e8b8a74fec
Size

5KB
MD5

b72ec90466ca2e5a7d2b4f895df4bcc9
SHA1

599b1c14269c9e6154fd8b6982c7e91fd4cc0ba4
SHA256

c1951e186b76a42a2dc3e6f7a556d171d61abddcc87fb47528f969e8b8a74fec
SHA512

e8220ed7f458b8767d535a115875ab352154f7706199df62f92ecb49a829fe24984350829741696eed13593065790be60c6a4756178d62b8b9313e638e11ff67
SSDEEP

48:SsilXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tNRuqSxp:NuWLkFfNnOKYloIQ2pm2pbYSDxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1951e186b76a42a2dc3e6f7a556d171d61abddcc87fb47528f969e8b8a74fec

Files

c1951e186b76a42a2dc3e6f7a556d171d61abddcc87fb47528f969e8b8a74fec
.exe windows x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ