13a42c46b7ec1a83a923db80d13adcf5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13a42c46b7ec1a83a923db80d13adcf5
Size

67KB
MD5

13a42c46b7ec1a83a923db80d13adcf5
SHA1

3b2578113c3bb414a80f2a4cb771cd654515c17c
SHA256

6b49a8e917eaa201b227049ee4fffd5ac44f95b2ea31c5ecb932069e11004dcf
SHA512

c1163c23834db155d8e3145e62b2bc56351f2ad5e14945b20c298fc3137e45242811c4488aea3a1cbb03a0cc84c062577dbabdd1475897fb40612c869c593edd
SSDEEP

1536:YhGR/TmZaKKXNOg7iKMRsUwl1T514F77caaY0i4jcFIz:YwRrm0K8Og7iKGs95G7NaY00Sz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13a42c46b7ec1a83a923db80d13adcf5

Files

13a42c46b7ec1a83a923db80d13adcf5
.exe windows:4 windows x86 arch:x86

aada84ad578c76ac4987d514c95e7e14

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstVolumeW
RegisterWaitForSingleObject
RegisterWowExec
WritePrivateProfileStructA
HeapUsage
MapUserPhysicalPages
EnumTimeFormatsW
GetProcessWorkingSetSize
BindIoCompletionCallback
CreateIoCompletionPort

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 52KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE