1d32230b8abd385f7b04005acaee29b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d32230b8abd385f7b04005acaee29b3
Size

5KB
MD5

1d32230b8abd385f7b04005acaee29b3
SHA1

5facdab7dc05d0ab2a36a6f5ad477831309d5123
SHA256

daa81554cab72f4d4793f25840b680429f7e34aa330c02ab7b660e9e05c546ea
SHA512

95171eafcc4996c5c655d2cdec45f9b13c302554d937813c75f1e91897f1a7b182d2c70e7bf2f46e12c72252eced676da4b82ad8720ae71c693bd41114d1efa6
SSDEEP

48:a+TOOGCBN5uMDdZXxA9pvjqlN3uByV7z1WiIZzY1QFQYtIYABrHv2MQzGi:DDduMDdZXxsUlldM3zYDYtI59HOGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d32230b8abd385f7b04005acaee29b3

Files

1d32230b8abd385f7b04005acaee29b3
.exe windows:4 windows x86 arch:x86

c1816fc730409ce53044c540f9dbb246

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameW
WideCharToMultiByte
lstrcpyA
HeapAlloc
GetProcessHeap
HeapFree
Sleep
ExitProcess
lstrcatA
GetCommandLineA
CreateEventA
SetEvent
CreateThread
ExitThread
CreateProcessA
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetProcAddress

user32

DispatchMessageA
TranslateMessage
PeekMessageA
CreateWindowExA
CharUpperA
CloseWindow
DestroyWindow
ShowWindow
MsgWaitForMultipleObjects

advapi32

RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 268B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE