1d370fa155f56094dedc4b96e29bf2f1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d370fa155f56094dedc4b96e29bf2f1
Size

44KB
MD5

1d370fa155f56094dedc4b96e29bf2f1
SHA1

e7ec33b8b610df8d1dd1a49dc28ff543370b136d
SHA256

44142b6abbc94f8a05716a4a0a40b028927ade859a739f7c1606b4c10adf0e5f
SHA512

440810b7d8846d77a6aeffc55724c4111ee712d2fdd55c4c18970a8bffde2c0a59881183a35e61004e1835411ad87a49c7f3fd75acab81f2d8d7e08e8a9f0337
SSDEEP

768:OVZBZChI7DeRHPJlAx7/n44vpyYrWJ7WPV4AadciLUGT:GBf7SRvjcNpYJaPjsvLrT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d370fa155f56094dedc4b96e29bf2f1

Files

1d370fa155f56094dedc4b96e29bf2f1
.exe windows:4 windows x86 arch:x86

233d43c85d3e6d8c909589d1c7274413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetCursor
LoadImageA
GetMessageA
DrawTextA

kernel32

SetEndOfFile
lstrcmpA
WriteFile
VirtualAlloc
TlsSetValue
EnterCriticalSection
EnumResourceLanguagesA
EnumResourceNamesA
GetModuleHandleA
GetStartupInfoA
LoadLibraryA
Sleep

ole32

CoInitializeSecurity
OleCreateLink
WriteClassStg
CoGetCurrentProcess

Sections

.text
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

code
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE