1e8b3e37dbd2562ab2b017d0a3cdeb5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e8b3e37dbd2562ab2b017d0a3cdeb5d
Size

439KB
MD5

1e8b3e37dbd2562ab2b017d0a3cdeb5d
SHA1

20a29616745b3deec35bdd697ef3a2cb4d917660
SHA256

24dbbd07e60d7698a68219c48dbb3e1ea609f1bb9070eb41c89b81b9285bbda6
SHA512

4c6114cf7ff9b48973e21a1456d6b139073b431963c1d44081753e770b090ca50253fef880759ebf1b895a5f5ae7b39576419f59d13c8fb89dd99fa0a366c8d2
SSDEEP

12288:w2l8b89rehrCHu2W+RFCWnk5hCWKWWPNPqOk:wjcrvHUNWk53APNPqOk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e8b3e37dbd2562ab2b017d0a3cdeb5d

Files

1e8b3e37dbd2562ab2b017d0a3cdeb5d
.exe windows:4 windows x86 arch:x86

a92689a2fc2030267795524f4a5b2636

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strcat

kernel32

HeapAlloc
_lclose
_hwrite
_lcreat
GetTempPathA
SizeofResource
LockResource
LoadResource
FindResourceA
GetCommandLineA
GetProcessHeap
ExitProcess
GetModuleHandleA
GetStartupInfoA

shell32

ShellExecuteA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 435KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ