1871b6ffa6288b9b330c8ec423df691f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1871b6ffa6288b9b330c8ec423df691f
Size

25KB
MD5

1871b6ffa6288b9b330c8ec423df691f
SHA1

b9296b5d67477c3b773b9b238a0c7f7562e43ac6
SHA256

e0e625ccbb987735ac978fc038b58ee5a2301e0216233e12ca4e5b212e733d3b
SHA512

9d0e3d0767ef5cb0c9543b5c319e7ef9a24b6309c76571f21304dd8252ad3177ee6e2427938c168a03c6aaf92c451910bbc0b350464e17634371b60dd24d5f0c
SSDEEP

768:QAPng+/R7u+5j6EJgxFFizWkDx5dgd7GJFJ54MK:Qmg+J7RR6EuFkak15GdiJFJt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1871b6ffa6288b9b330c8ec423df691f

Files

1871b6ffa6288b9b330c8ec423df691f
.exe windows:6 windows x86 arch:x86

27aa6d4ea11da145e661917334c22657

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RegisterApplicationRestart
GetModuleHandleW
GetCommandLineW
GetStartupInfoW
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
GetStartupInfoA
InterlockedCompareExchange
Sleep
InterlockedExchange

msvcrt

_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs

msctfmonitor

DoMsCtfMonitor

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE