1d119f13732b3f566ed1a3d3f811a86e | Triage

Sharing

General

Target

1d119f13732b3f566ed1a3d3f811a86e
Size

188KB
MD5

1d119f13732b3f566ed1a3d3f811a86e
SHA1

d3183beb8eb8f4a012815173129e890c9347d4d4
SHA256

b04a1bcf76e467650c7c13c05f5b68592a7b42f82d80165aeef9dfbf8eef968f
SHA512

8e4cec36bdcb985a12d53085b5a1e0ada617ffff5ff0370f54aeab7906c2c7aec27d074423547319bfe1e8ee0d0ada5353b4d7904b810b4d18d4c83508beb069
SSDEEP

3072:SY/z+HuEGiIj1aM+jV7fmN5A4J8i1/1ObngnaPzLJ:SgKHuEGikHCV7EXySnaP3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d119f13732b3f566ed1a3d3f811a86e

Files

1d119f13732b3f566ed1a3d3f811a86e
.exe windows:4 windows x86 arch:x86

fc4ae123adc649b9bed31a950e2191a1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAllocEx
GetACP
IsBadReadPtr
GetLastError
IsBadHugeReadPtr
GetProcAddress
LoadLibraryExA
GetModuleHandleA
ExitProcess
GetCommandLineA
ExitThread
GetCommandLineW

Sections

.text
Size: 168KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ