1fa50448bbd2d9488fd46a8d42de7951 | Triage

Sharing

General

Target

1fa50448bbd2d9488fd46a8d42de7951
Size

41KB
MD5

1fa50448bbd2d9488fd46a8d42de7951
SHA1

a10da3d3c6527c89e0f0acd727999fe858f9da63
SHA256

cb8a6db5a0274832922959f8ff9356c33656e5d34d289ffe51ab8651070901ae
SHA512

086afc54d6099092b4d0f37a4013826222dfbd7597d5ad96dec4f1cee4937921ccee833a7399f6c46dc284953e9bd104a3c60e69898ff34d3603f3fe0d61f95e
SSDEEP

768:JbTqavYjTvEBTfVDAyNX8PFOJ40feIaFzSUqSH3Uxa:JbTqBjT8fhAyF8NKeIaJExa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fa50448bbd2d9488fd46a8d42de7951

Files

1fa50448bbd2d9488fd46a8d42de7951
.exe windows:4 windows x86 arch:x86

054e4e5c28d6533b44ae24cbf3e08a15

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
lstrcatA

user32

SetWindowPos
AttachThreadInput
SetForegroundWindow

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ