1d237f885015bacd32483f7d4135d1df | Triage

Sharing

General

Target

1d237f885015bacd32483f7d4135d1df
Size

488KB
MD5

1d237f885015bacd32483f7d4135d1df
SHA1

1f01e2174ee2b300cf5c74d7df0bfaee11a57f78
SHA256

def3b7ba5b2651941218d77272bcb2fde5d6e91ea64507fee316d4085a18b244
SHA512

8447ae5500a602f7e763c81469e9f4e540c226565ad6a970d10675a75dd02c3ef3a02bce7be3c9b6f8c3bdd9318178bba2c8a62298c9b9bf7f23c0e309ff32d7
SSDEEP

12288:xHVPzjc6qD9ShYAk9FML7ke0fOlW6z11z1gx:xxch9r9hmlW6rz1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d237f885015bacd32483f7d4135d1df

Files

1d237f885015bacd32483f7d4135d1df
.exe windows:4 windows x86 arch:x86

6a1443746b81c6ab8840740e1792bea6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
GetWindowsDirectoryA

user32

GetDoubleClickTime
GetForegroundWindow

Sections

.text
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 365B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE