1f5ff8d2297bad095d9b1a458d8bd9ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f5ff8d2297bad095d9b1a458d8bd9ba
Size

453KB
MD5

1f5ff8d2297bad095d9b1a458d8bd9ba
SHA1

0082947278c26f92bfd246cb99e43f71d9f29c98
SHA256

1b475824418b652609a20eece2299cc7cee04edd26a41293d0441d72217117cc
SHA512

78536510c5eb64ac2967a6a29b84acaa0ad3349b977e979ea58148499e5847df1c392fd2037f24d1f449e546e4a8fef37caae1d8996944e42042e7e743013817
SSDEEP

12288:ghB3ospNelPCXzYaf2oS8tZqZdK87+KDVZpdsYifqI8IqCb/:gh+3/Y/tZCdJPLu/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f5ff8d2297bad095d9b1a458d8bd9ba

Files

1f5ff8d2297bad095d9b1a458d8bd9ba
.exe windows:4 windows

ed49a3a57ba2f574ad7dc6d15f2f2892

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

_write

shell32

ShellExecuteA

user32

MessageBoxA

Sections

.MPRESS1
Size: 451KB - Virtual size: 528KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 985B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE