1a0e36fd28f34a270e94d1952ee44e35 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a0e36fd28f34a270e94d1952ee44e35
Size

55KB
MD5

1a0e36fd28f34a270e94d1952ee44e35
SHA1

b52d0de6e05eaf22ea3c2711f8f2b9634ec360cf
SHA256

06aa1d411cd78c1f6225c0a928f39e9e90814659c32de634211a35d70182feb5
SHA512

5f58c02ecb3ef4cc61aa2ca1af7c2c9774d89de0f9daeea2e4867df6c211dc0f1c7689e59e90be9acffbee28aabda0d42258a18fb49d17111fd3d931ab92940a
SSDEEP

768:y3fPirKcTw+lqvdu/c+7BLbC4kzSk+WdXpfmjxrvHREtvj2MMLpq:yv2/wZvdGc+tPC4kzx+CqxDHIX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a0e36fd28f34a270e94d1952ee44e35

Files

1a0e36fd28f34a270e94d1952ee44e35
.exe windows:5 windows x86 arch:x86

9b2471e86bd8d2c58452a97f9e30e58b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA
HeapAlloc
VirtualAlloc

user32

EnableMenuItem
GetMenuState

advapi32

RegOpenKeyA

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SECT3
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ