1164aad3815982f268d28e2e7f9c1e0325fb44338e04145ea2eed5524a63e5d2 | Triage

Sharing

General

Target

1164aad3815982f268d28e2e7f9c1e0325fb44338e04145ea2eed5524a63e5d2
Size

5KB
MD5

09069271ea300e86f5ea2feae3a631b5
SHA1

481e5440e9d256e496d74402f3c476eac43c9357
SHA256

1164aad3815982f268d28e2e7f9c1e0325fb44338e04145ea2eed5524a63e5d2
SHA512

5f9e4ff372d2ac2cd764ecdbd1ede3ab73a3174e70f6bb7b697a568d306266b95cf9c685a2561eed830292f0cadb60d369b956f6e2238b5af617937d5429920d
SSDEEP

48:SflXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7txRuqSxp:sWLkFfNnOKYloIQ2pm2pbYSnxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1164aad3815982f268d28e2e7f9c1e0325fb44338e04145ea2eed5524a63e5d2

Files

1164aad3815982f268d28e2e7f9c1e0325fb44338e04145ea2eed5524a63e5d2
.exe windows:5 windows x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ