131a69c18788687e2d1e21d154760032 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

131a69c18788687e2d1e21d154760032
Size

7KB
MD5

131a69c18788687e2d1e21d154760032
SHA1

22a03597497d2308f9634a15f177a252be907d82
SHA256

5a29d0b6005994d3fe71e0189cb5e4ca75b0a5e4541bc9bd67daaec05efd764c
SHA512

047b96a8170159f1618b914eb7dd4de190adc12176a8386608710f46117ff094372283fe1cfae967652f485a1e6d97fe352469cdf06bdeaa193902e65a9ee604
SSDEEP

48:6jlFSffxfrFGUlR1N84Zx7tGnwh6eqIW519mP1PuEBSpBv7xH:KOnlrFt17x7tGnw5qIWb0um6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
131a69c18788687e2d1e21d154760032

Files

131a69c18788687e2d1e21d154760032
.exe windows:4 windows x86 arch:x86

65cdcf7f38a0fd181c6cb07d32d8f71e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesExA

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ