fc1ff1f3e8c42d56d6a82c6937821d2a | Triage

Sharing

General

Target

fc1ff1f3e8c42d56d6a82c6937821d2a
Size

179KB
MD5

fc1ff1f3e8c42d56d6a82c6937821d2a
SHA1

43c2cef23030621de5eca50560d4cafe3a147dc1
SHA256

6077392dc680217163773a3988ee316e230d319fe979cfdec3c8b87c9d6108d7
SHA512

92407196647bdc71b42eeb060c9601188ebe2a401928c8cbcbddfe5f486627dc14d32ccfab8e97f9345a61be9d2bdad1282f8835ef6baf6e591f5ef00025a5c2
SSDEEP

3072:LBXTi+2L9SMXaivHOCj69FV49JEewOws13OUIZVSVy2kUswokqCkuNI8ohDwP4:tXTi1LXXj61FQws13l6VSHbswokqZBhG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fc1ff1f3e8c42d56d6a82c6937821d2a

Files

fc1ff1f3e8c42d56d6a82c6937821d2a
.exe windows:4 windows x86 arch:x86

f58dd59ff3dc481436ffc78cd659042f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
RaiseException
GetSystemInfo
VirtualAlloc
RtlUnwind
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetProcessHeap
HeapAlloc
EnumResourceTypesA
VirtualQuery
FindFirstFileExA
ExitProcess
IsBadReadPtr
VirtualProtect
HeapValidate
HeapFree

gdi32

GetStockObject

oleacc

AccessibleChildren
CreateStdAccessibleProxyW

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 144KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ