1e18e38965724696e0c86565cfb8df70 | Triage

Sharing

General

Target

1e18e38965724696e0c86565cfb8df70
Size

76KB
MD5

1e18e38965724696e0c86565cfb8df70
SHA1

476f60cd2b3ed3e19d27ca530eae35d12e94ee36
SHA256

09bd0ad79974312f3e139c9f701a0e137949abb10a26c47c1df29462b0c989df
SHA512

c35d01ab259a6d10eb9607790f460dd2c104a46044ff2fb1b71e3cd986b84c9259ef6149bca23af74c10c8bd33d1240e021603470804984b33a8fc429025d645
SSDEEP

1536:0y5Z2lNK2NTppSeq+HZi9w7hPf55X2b8aDN6pjVrs2ryrd1vUQuq6:0y5YXlNT1HZiW7hPhZ2b8ap6Hs2qo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e18e38965724696e0c86565cfb8df70

Files

1e18e38965724696e0c86565cfb8df70
.exe windows:4 windows x86 arch:x86

855dd518c7332ae7bc333d9542140d56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileExA
LocalFree
RemoveDirectoryW
EnumResourceNamesW
FreeEnvironmentStringsA
EnumerateLocalComputerNamesW
SearchPathA
ZombifyActCtx
GetStringTypeExA
DeleteCriticalSection
RegisterConsoleIME

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.brdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE