1a408d9b3150db82b593f3e21135fd1d | Triage

Sharing

General

Target

1a408d9b3150db82b593f3e21135fd1d
Size

12KB
MD5

1a408d9b3150db82b593f3e21135fd1d
SHA1

36b8ddf9fa0bab36405dc07b53b7bf0f18e4bada
SHA256

c6f77b73f9ce6fa69d2a68b6a70bc6c71e87345a5d73a1eb2e395ea0d8b6012d
SHA512

3200b963b3ed21b458a55468916ff308b3efabc46671f3bb6bdfe999b91d42a06add7c6eb28aabe16fde82e3b0d789fec96a72655ff8bd460b1a14cd588c3d47
SSDEEP

384:Zl9777DTu3pw/EQmp1S0CWl9777DTu3pw/EQmp1S0Cu:ZLv7DTu+zmRLv7DTu+zm/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a408d9b3150db82b593f3e21135fd1d

Files

1a408d9b3150db82b593f3e21135fd1d
.exe windows:4 windows x86 arch:x86

60b861faf7b48cebe41a527dee704e69

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

ExtCreateRegion
ExtFloodFill
FrameRgn
GdiGetDC

wsock32

WSASetLastError
WSAAsyncGetProtoByNumber
getservbyname
getsockopt
ntohs
rresvport

user32

CloseClipboard
CreateCaret
CreateDialogIndirectParamA
CreateMDIWindowA

msvcrt

wscanf
wprintf
wctomb
wcsxfrm
wcstoul
wcstombs

Sections

.text
Size: 1024B - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 749B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE