1f895dceca491c5493cf48d41c3d9c50 | Triage

Sharing

General

Target

1f895dceca491c5493cf48d41c3d9c50
Size

147KB
MD5

1f895dceca491c5493cf48d41c3d9c50
SHA1

e326d80f23d3efd68c36ab1b6febef2bf0d8f496
SHA256

bb0411ff64e679f579be5161a614246ca5ab65cdb6797c82e419e1542135fc22
SHA512

10f0df51ce7f09a56c05d59682ea0de003a9846a5639aee33848648cdb14bcea2f9be88df27fd65eedf63a9c83da1c185f4ffc41a939eb95439432d3d81b9ac6
SSDEEP

1536:DBC6QJzp6gYkjKGuC0z9pI6AOaW6Q2X4wvxLfzzS1:DzQJzEcKGuC295AOadQcJ5Pz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f895dceca491c5493cf48d41c3d9c50

Files

1f895dceca491c5493cf48d41c3d9c50
.exe windows:5 windows x86 arch:x86

aacd3ae6a78e924031cda1c50fb61134

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

AppendMenuA
AppendMenuW

advapi32

RegEnumValueA
RegQueryValueA

kernel32

ExitProcess

Sections

.paiih
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.aano
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bloah
Size: 76KB - Virtual size: 416KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bkpde
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 571B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ