1f53004aad2eda78adc4f67c3af3df0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f53004aad2eda78adc4f67c3af3df0d
Size

56KB
MD5

1f53004aad2eda78adc4f67c3af3df0d
SHA1

59852d95b882be02784edd7e0c4cfea939d5476c
SHA256

d0c18d166bef47a24bc1f669fe2f488075b8e78d77b338100714d904b8a0f25c
SHA512

144214ec0068cadf4e91081e462c3e456ceaf1eb26e53df7fbe6617cc5c2ad012a4387c766993fe0a0e5471aeb96f4cbf1dc70163f0a24c95e3ecb8587ee8e36
SSDEEP

768:2+Q3jJ3K216RwILJNYz/Bz7jaCdiy0RJDrw0bl7qXprBtjmtGyRZxfY5R+uocbVz:0ARJNYQRRJAqS4XDAdTQldo5GJHk35

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f53004aad2eda78adc4f67c3af3df0d

Files

1f53004aad2eda78adc4f67c3af3df0d
.exe windows:4 windows x86 arch:x86

1a7b48fdf9daf8ad37d628daec6403d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindActCtxSectionGuid
SetProcessPriorityBoost
Module32NextW
LocalReAlloc
FlushViewOfFile
CreateEventA
GetStringTypeA
GetVolumePathNameA
DeleteVolumeMountPointA
GetProcessIoCounters
BuildCommDCBA

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE