fdc61448bedbe6412c75cacb4b0fa82c51dde079dabb96d36c9a595cab5b982d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fdc61448bedbe6412c75cacb4b0fa82c51dde079dabb96d36c9a595cab5b982d
Size

5KB
MD5

bda1567285cb01c2d495563269407fcd
SHA1

379af80016773cdd43113b20a1be1b0a9ecbd615
SHA256

fdc61448bedbe6412c75cacb4b0fa82c51dde079dabb96d36c9a595cab5b982d
SHA512

8ca59a6057de81b47d8a26014991b21957789a672d1e28383c4d2a5065ddd78612f55a9a01e19a0e3a4c3f0f94336a32c8539361bb8fc275411677ef8c153191
SSDEEP

48:SBlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7tyRuqSxp:qWLkFfNnOKYloIQ2pm2pbYSOxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc61448bedbe6412c75cacb4b0fa82c51dde079dabb96d36c9a595cab5b982d

Files

fdc61448bedbe6412c75cacb4b0fa82c51dde079dabb96d36c9a595cab5b982d
.exe windows x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ