1da2dae5fff119725f98ae2203413056 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1da2dae5fff119725f98ae2203413056
Size

31KB
MD5

1da2dae5fff119725f98ae2203413056
SHA1

eacedadc026b259f48d533527c7acebb082a22b8
SHA256

c8d76568c016aa77ec44168b61f94d6aca5ffa04b1843ec3001d52a0957724ef
SHA512

3dc4b874aa2162c171dbfab1d81e36e3bc268ba1029d47aa27d49ac173e4d101daf68ab0a137779f03b67630ec6b128b12e6054b8230d7552b158c20b9767779
SSDEEP

768:scG+H+E9gdouuaILZMENR7IVaaQuzvyj0UmRK:sAHYmuML3vIVvQuzumo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1da2dae5fff119725f98ae2203413056

Files

1da2dae5fff119725f98ae2203413056
.exe windows:4 windows x86 arch:x86

737ec10119ffedfbaf0a9e1e3bd19243

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetModuleFileNameA
GetSystemTimeAsFileTime
GetCurrentThreadId
LoadLibraryA
GetLastError
GetTickCount
GetModuleHandleA
ExitProcess
GetCommandLineA
SetConsoleTextAttribute
LeaveCriticalSection
WritePrivateProfileSectionA
GetNamedPipeHandleStateW
InterlockedCompareExchange
SetConsoleInputExeNameW

msvcrt

bsearch
_stricmp
strcmp
_ltoa
strlen
strtol
strcspn
malloc
_exit
fprintf
memmove
_strnicmp
ftell
wcsncat
rand
_wcslwr
_snwprintf
atoi
_pctype
_beginthreadex
_itow
strncpy
iswctype
_chdir
strstr
sprintf
_wsplitpath
strtoul
__getmainargs
_onexit
fclose
_except_handler3
srand
strcat
_strcmpi
qsort
fgets

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ