1506a096e00b6cebf70f4acca8c3972d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1506a096e00b6cebf70f4acca8c3972d
Size

8KB
MD5

1506a096e00b6cebf70f4acca8c3972d
SHA1

1a1c6a6562ac788dc9e114f5833c498eae6b5bf3
SHA256

58c3727e0fcc3c9f4419e629053167af48aa760a75f2b6b840c9b6f962e79628
SHA512

01c7e25125b972bb8c48396d711c0395235b94e476bd924a9aeb7bb09e6396ad1ad6f3199e2e45620bd136cee7e5c025ab617718e796d90eae42103e019e2e1b
SSDEEP

48:68Z3gBW07RM66NFlrVnWfrQESo6BgJawqkoLDmOOYKH90G/cRH4moTKCPuWBTBvZ:5gBWEWJNlWTD7nvx90G/cRHAbu4Td

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1506a096e00b6cebf70f4acca8c3972d

Files

1506a096e00b6cebf70f4acca8c3972d
.exe windows:4 windows x86 arch:x86

65cdcf7f38a0fd181c6cb07d32d8f71e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDC

kernel32

CreateThread
ExitProcess
GetAtomNameW
GetLastError
Sleep
WaitForSingleObject

gdi32

EnumFontFamiliesExA

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 326B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ