fe1dab4bcbbab558d05057b4b18c7c21 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe1dab4bcbbab558d05057b4b18c7c21
Size

208KB
MD5

fe1dab4bcbbab558d05057b4b18c7c21
SHA1

d03e8573342438e8ed0b4b2586335eb1b8781146
SHA256

e0e5840ca61804febf8fc316ae4a5f5072f82534a0e0ca241d4268ca186952d0
SHA512

b06485e6b0c2266112894f0c4f25c9279abe90e3cf390764a21ea932e8d7cead91c9c171635f414edcb2b31c67eda89108a692a55a073e3bf9d4ede3ef4cd12c
SSDEEP

6144:4l7uK/sg4pJPvgCq6tNb4JJRVnwN1EMqS0:hg4pdofANEJ6Nhg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fe1dab4bcbbab558d05057b4b18c7c21

Files

fe1dab4bcbbab558d05057b4b18c7c21
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE