1d5233af5276c69dfedf3164cbce3a2e | Triage

Sharing

General

Target

1d5233af5276c69dfedf3164cbce3a2e
Size

66KB
MD5

1d5233af5276c69dfedf3164cbce3a2e
SHA1

49f6f1f384f2bdf6b2afdfc3273ad0c37af98672
SHA256

abd54f9062a14d719baf17070eefdb650395d613655ef4de275b912e0c1b5076
SHA512

d1939cdf29f39438ce6664cce995128064b83e8d17e2e71369da1c5710c8b747679a3f916f7a2c3a762c943cb27b05287a5b694a1bc552a96a79575c000c06fb
SSDEEP

1536:i56yKtA4pu/m+9NqQ/JbQglCKNaBDqbMi76x55AlWSqkc:o4xKm+9cqF1kpBubN6ml/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d5233af5276c69dfedf3164cbce3a2e

Files

1d5233af5276c69dfedf3164cbce3a2e
.exe windows:4 windows x86 arch:x86

137eaaa0392a3e65b47864d3877d03b3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
ReadFile
GetCommandLineA

user32

GetFocus
CopyIcon
DrawTextW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 264B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ