1cfa07cf01d1c260908b19e3711ddede | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cfa07cf01d1c260908b19e3711ddede
Size

176KB
MD5

1cfa07cf01d1c260908b19e3711ddede
SHA1

b9a94e132fab957b9becaf1affa1ca5747b712db
SHA256

953eaa3bb6cce4b8c419e9c667a159d094a1f9880d6043170fee784418bbf188
SHA512

a0ac07c4d3826adda7913ec00920d8693ea6830401da34f6ba0dbc0904ccfd9bb9df9f0015686c80c72e2dd5d0c7dfbb2f8198fd7263d0246b87b30dfd304f4d
SSDEEP

3072:YsWXnDjuB47Gva7rZP/4EL+8M3JkCGQpw34JsRpU/Pf/OouZe8VcZQ3Eg:YjzdGvir4ZkC1w3AsR6/X/V0vV23

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cfa07cf01d1c260908b19e3711ddede

Files

1cfa07cf01d1c260908b19e3711ddede
.exe windows:4 windows x86 arch:x86

adac0a490bb9a61776c7e39955a7a9ca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CreateBrushIndirect

version

GetFileVersionInfoA

kernel32

GetLastError
IsBadHugeReadPtr
IsBadReadPtr
GetProcAddress
GetModuleHandleA
GetCommandLineA
lstrlenA
ExitProcess
LocalAlloc
VirtualAllocEx
GetOEMCP
ExitThread
GetModuleHandleW
LoadLibraryExA
LoadLibraryA

advapi32

RegCreateKeyA
RegQueryValueExA
RegEnumValueA

Sections

CODE
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ