1181e90b649b82fba15314a6e2b6022f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1181e90b649b82fba15314a6e2b6022f
Size

12KB
MD5

1181e90b649b82fba15314a6e2b6022f
SHA1

552b1034ce37deff5cf18a6e1b6afe89fed8c993
SHA256

caba22c9f55836f17d68ee8950c3b9c7adcd61f5780d9242c07a02657fde58d4
SHA512

4604302ec9044d5238d73966f31e2ebeacf4233ef01f374e243b0681c70dce3231e8b88aa0e4a1810cc6ae77d64e1a3dd4a5bba6ece98127514a4236e415835b
SSDEEP

384:HmlKS7EWuARNGg3LZU+cQVaylVAsjShoyApHgHP:G7EWnLZUkaKVVdyApH0P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1181e90b649b82fba15314a6e2b6022f

Files

1181e90b649b82fba15314a6e2b6022f
.exe windows:1 windows x86 arch:x86

09e744ec88d65ed44231c9044f6b8532

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMailslotA
DeleteFileA
EndUpdateResourceA
EraseTape
FatalExit

user32

CheckMenuItem
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

wininet

CreateUrlCacheEntryA
FtpGetFileA
FtpRemoveDirectoryA
GetUrlCacheEntryInfoExA
GopherFindFirstFileW
HttpEndRequestW

gdi32

CreatePalette
GdiGetPageHandle
GdiPlayJournal
GdiPlayScript

Sections

.text
Size: 5KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE