1a2ff9771a26bd73c1e68e3f9114bd90 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a2ff9771a26bd73c1e68e3f9114bd90
Size

80KB
MD5

1a2ff9771a26bd73c1e68e3f9114bd90
SHA1

1f76a3d1d38d53d0f4a10a55c03d9f67a4516b6a
SHA256

1e87e8e45f29dc6b2565aca6495c6f5ed9828db6263dccd745a9607bf065a7f0
SHA512

eca640dd501a918f8775272cbe77dc379fe4946bf2c3f90b949c41b1c22b1ca466d9ef5d3a02626a9c673eff16a9b1e4b5b3f1591013b35139b1870717faa74a
SSDEEP

1536:5AUR8RMLovEk8husuihmsfD6S26qg82hW8fPL:5XZLovL8osuqm4D6S26n8vYL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a2ff9771a26bd73c1e68e3f9114bd90

Files

1a2ff9771a26bd73c1e68e3f9114bd90
.exe windows:4 windows x86 arch:x86

2230252d9a57547c5792f6cc2a8f602e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DnsHostnameToComputerNameA
SetConsoleCursorMode
UnlockFile
QueryPerformanceFrequency
CreateMailslotW
CreateRemoteThread
AddAtomA
VDMConsoleOperation
SetThreadIdealProcessor
TryEnterCriticalSection

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rrdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE