13185ec9fea953d6da3b5bb8a1d618b1 | Triage

Sharing

General

Target

13185ec9fea953d6da3b5bb8a1d618b1
Size

17KB
MD5

13185ec9fea953d6da3b5bb8a1d618b1
SHA1

26b8f0b73694391aa2c5412c26d14e232066022a
SHA256

ca8eeba7a972c6bb759a7d08c116787693e3ae73ef858f207a8acae30f928bc1
SHA512

b23ef155c517bc75af32ad528fa3c6f4c9d8839a894d2409791e2bade99ba1bbdbbdf683b95cd4941d102623d34c4755b931f80a43325cda906a096f04eb1a41
SSDEEP

192:G8izYlpieycpo/zeoEMgr9aiI5SkT80PY8apbHQxoKQaN3l6CjzdVsQC/8:uz1lg65XT80PABHQebKl6CPkQC/8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13185ec9fea953d6da3b5bb8a1d618b1

Files

13185ec9fea953d6da3b5bb8a1d618b1
.exe windows:4 windows x86 arch:x86

44781ca15eda692a1e871a3143fb5b63

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

PathResolve

kernel32

ExitProcess
InterlockedExchange
HeapAlloc
GetLastError
GetProcessHeap
VirtualAlloc

Sections

.textbss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.debug
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE