1a5d49a4543e0a3a7ea78a2767e32d55 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a5d49a4543e0a3a7ea78a2767e32d55
Size

638KB
MD5

1a5d49a4543e0a3a7ea78a2767e32d55
SHA1

a620d43739a925b6b454a1c18d11968c467f5f78
SHA256

26e0dace7e1672cd16ee86a3cde492ade9642b8e354c4a60581ee20c9f997a21
SHA512

9ba2608c9d766589a6a396bf42861ff5ad435ce7162f42c978174337f7db7e986a5d78abee3b92a6b4c7a2422dfe553ac77c47bcdcf707203e1e66ccb22db4df
SSDEEP

12288:6VEKLwg7mJhEKoV8vzbfGzgQwfQzrzMtCXG/9Mkjp6PM:6WsqZoVizSzgQuQ4AX69MRPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a5d49a4543e0a3a7ea78a2767e32d55

Files

1a5d49a4543e0a3a7ea78a2767e32d55
.exe windows:4 windows x86 arch:x86

68de7054b460e3395d0346c0f96b55bd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_write
_lseek
rand
srand
time
_open
free
_read
strncpy
_exit
_XcptFilter
exit
_close
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
fopen
fseek
fread
fgetc
fputc
fclose
sprintf
??2@YAPAXI@Z
_acmdln
malloc

kernel32

GetModuleHandleA
GetProcAddress
Sleep
CreateProcessA
WaitForSingleObject
CloseHandle
LoadLibraryA
VirtualAlloc
GetStartupInfoA

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ