1258f6b9640c6954ec86202d9b682848 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1258f6b9640c6954ec86202d9b682848
Size

7KB
MD5

1258f6b9640c6954ec86202d9b682848
SHA1

4aaee367247d09a0720e7fd59996dd425f155c23
SHA256

51e61a51e3e0d724be3269447ac73c0f52c56eda9f93ca32cd337a7549add752
SHA512

75e8cb89b466d0553c9cc97dda2c77719ab3c65cef47f038e790c58ae9a7a8c93a75e3f988e692433ed98f42e4cf4e481550131b8c384368e6a1273c6ed5ab7d
SSDEEP

96:aIPE1vdgEl6E9wWfQ0CyJCVhHNVB73ghnSd89lkMovtp2dLk7SMOcu7GTqAjVHB/:afJ1ovtKyf5u7mfs/+T9HP1oyFz6spb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1258f6b9640c6954ec86202d9b682848

Files

1258f6b9640c6954ec86202d9b682848
.exe windows:4 windows x86 arch:x86

802f04b44f254a769cdd585d85988dd3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_exit
__p__commode
__p__fmode
__set_app_type
_controlfp
memmove
malloc
sprintf
getenv
??2@YAPAXI@Z
_adjust_fdiv
_except_handler3

kernel32

GetModuleHandleA
LoadLibraryA
GetProcAddress
CreateThread
Sleep
GetStartupInfoA

user32

MessageBoxA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 738B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ