1404d8c4ee0a5de3d00eb2c44e0a96fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1404d8c4ee0a5de3d00eb2c44e0a96fc
Size

90KB
MD5

1404d8c4ee0a5de3d00eb2c44e0a96fc
SHA1

1054af948d3381ce64b44968c394399240b4961c
SHA256

ea2d525799b446fab802dd95f3a837f5acfc644f1469c27ba2c0a268e6d9371d
SHA512

910130d8cf71ea96dd2e4e8f72a16709bbbc5e491261baf8665ec248ab91ac31c3f4c5e623bd1ce7f704de77fa75158b5c173dc71301d326321a14fb2861f05e
SSDEEP

1536:fkclQPozPUs7P+LH9ueCpso9t+6DWFMmy45HG6RKOp4vzGFxYqqr0:ZSoTxc9ueCpv9cNoY2KQq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1404d8c4ee0a5de3d00eb2c44e0a96fc

Files

1404d8c4ee0a5de3d00eb2c44e0a96fc
.exe windows:4 windows x86 arch:x86

da3658085b6d2dfa6c780740b7fd0390

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
Sleep
GetModuleHandleA
GetProcAddress
CreateThread
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
HeapFree
VirtualAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 71KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE