1da0e5d44e6a5da45f4d147d33ccdd66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1da0e5d44e6a5da45f4d147d33ccdd66
Size

144KB
MD5

1da0e5d44e6a5da45f4d147d33ccdd66
SHA1

9d441d6bdb5732972a05c58e7b7fc63a4fc041cf
SHA256

6d460a39ee0e8060467786a3ecf63411e4fb84204ea126112cba023fe7016643
SHA512

0da8eda84ed95cd7a2d441f717df0303e9491dee71aa8f8ec78da9a244ddb9109e86c20ca2c7e34e6c0eb5c48e9efe158722c2b70fe27e4518307c5c23e614f2
SSDEEP

3072:NRn6GPa7aXwQNfRjrVOEf7Y4Qpyok9WUZxiv7H:N56Gfr9tMEfp9RZov7H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da0e5d44e6a5da45f4d147d33ccdd66

Files

1da0e5d44e6a5da45f4d147d33ccdd66
.exe windows:4 windows x86 arch:x86

ec5d697360306ce025888e1386f14089

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThread
GetComputerNameA
CreateMutexA
GetVersionExA
GetProcAddress
LoadLibraryA
GetCurrentDirectoryA
VirtualProtect
LockResource
LoadResource
GetCurrentProcessId
GetWindowsDirectoryA
LocalFree
GetCurrentProcess
ExitProcess
GetSystemDirectoryA
VirtualAlloc
GetCurrentThreadId
LocalAlloc
CreateEventA
FindResourceA
GetStdHandle

advapi32

GetUserNameA

user32

GetForegroundWindow
GetActiveWindow
GetSystemMetrics

msvcrt

memcpy
memset
wcslen
wcsncpy

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 14B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 109KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ