1d50e6dc9a5e8e3b665b18caae7d40e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d50e6dc9a5e8e3b665b18caae7d40e9
Size

4KB
MD5

1d50e6dc9a5e8e3b665b18caae7d40e9
SHA1

1cc0d8b3c64c0001bb4614c34d34e8e4c40d1d93
SHA256

0e6d9d2fc8631ec1fe017c6cee7475e1c91d420709f701ced2da52916bf2d9f4
SHA512

2fed1b204701927ad52cbbafbfc9cdc340e8976301727a9cda3835eed8a39418db2b73b6a93c9f5f4078d4d61fd40efbac8fddb46f87c87d2be7584e1661a43b
SSDEEP

48:Snizjjd8w/pKgLl6YHIqnS+oRNUSTCUSSLcW8K+BpK7cPtboyl1ing4jk:pp8w/Igx6YHzSTkSFS7K+ycPtboynif

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d50e6dc9a5e8e3b665b18caae7d40e9

Files

1d50e6dc9a5e8e3b665b18caae7d40e9
.exe windows:4 windows x86 arch:x86

13c4f1fed06d4ca8e4f373d43cecf87b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetProcessPriorityBoost
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
lstrcatA
lstrcpyA
GetEnvironmentVariableA
GetShortPathNameA
GetModuleFileNameA
ExitProcess
GetProcAddress
LoadLibraryA
CloseHandle
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
OpenProcess
Sleep
WinExec
GetWindowsDirectoryA
GetStartupInfoA

shell32

ShellExecuteA
SHChangeNotify
ShellExecuteExA

msvcrt

__p__commode
_controlfp
memset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__fmode
__set_app_type
_except_handler3

user32

FindWindowA
GetWindowThreadProcessId
EndDialog

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE