1f2da86bad4317c9c9bc38c4e4deadd7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f2da86bad4317c9c9bc38c4e4deadd7
Size

17KB
MD5

1f2da86bad4317c9c9bc38c4e4deadd7
SHA1

cd77131787e205a92ee92239d242e3a8df149204
SHA256

e2f7dff016767cec30978d6e6085bdc2b93f869a821ec872b6653fa27659911c
SHA512

90b2bf63a8546bf4604c078d27c39f78a66e02180b9d0326326bc4de33fcee19d3648ee716a42210c71636cebdf454486417c83d86b4bcc6149cead9298ef694
SSDEEP

192:/bX0Ob2QzYSvPY6ys3l3gNkZNddJZlq5YPSL1aZN1xkMcR:/D00lvPYDs3lQNkZNTfo2P8Mz1xk3R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f2da86bad4317c9c9bc38c4e4deadd7

Files

1f2da86bad4317c9c9bc38c4e4deadd7
.exe windows:4 windows x86 arch:x86

5c0ea14effe1129cf536d36bf100b773

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

advapi32

RegCloseKey
RegOpenKeyExA
RegSetValueExA

kernel32

AddAtomA
CopyFileA
ExitProcess
FindAtomA
GetAtomNameA
GetCommandLineA
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
SetErrorMode
SetUnhandledExceptionFilter
Sleep

msvcrt

__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
signal

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 368B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 368B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE