1f0a96bb877814f587c8387eef2dd955

Sharing

Copy URL Twitter E-mail

General

Target

1f0a96bb877814f587c8387eef2dd955
Size

89KB
MD5

1f0a96bb877814f587c8387eef2dd955
SHA1

bd72d66078a96687de5bf01fb6b27806de8ceff3
SHA256

21c52ae23f60cc90b776ad81e54b26b849701fa4c23a42e741b15590b7efa268
SHA512

d4c07f645cb598cd1a94c6b06e591ddec7b7db34e7779b90bea664a77be68af6bb0d0eba53466cd8adedf94d14977dd8c313a7055ba816fa3317a78cdd861d5e
SSDEEP

768:9CyprkOgCHTk9ZqCXUcbVSmo3LzeiYMb/5fBd5q1H0Bub321FovBEHu:Rpomg9MCXxVS33e8bhfBSH6ROvBEO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f0a96bb877814f587c8387eef2dd955

Files

1f0a96bb877814f587c8387eef2dd955
.exe windows:5 windows x86 arch:x86

c77f6dd43c4c9448c99deb404b3f9c16

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CancelWaitableTimer
GetProcAddress
GetModuleHandleW

user32

wsprintfA

Sections

PJutAx
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

A9HxT6
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 740B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RSRC
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

M5MbUh
Size: 512B - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

ZahJz8
Size: 224KB - Virtual size: 224KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2QC8z9
Size: 220KB - Virtual size: 220KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

5lwl9c
Size: 320KB - Virtual size: 320KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

J8Mb8L
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Jbp9qz
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

1gPTFL
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c77f6dd43c4c9448c99deb404b3f9c16

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

PJutAx Size: 2KB - Virtual size: 2KB

A9HxT6 Size: 1024B - Virtual size: 584B

.data Size: 512B - Virtual size: 740B

.tls Size: 50KB - Virtual size: 49KB

.CRT Size: 512B - Virtual size: 8B

.RSRC Size: 1.8MB - Virtual size: 1.8MB

M5MbUh Size: 512B - Virtual size: 1.6MB

ZahJz8 Size: 224KB - Virtual size: 224KB

2QC8z9 Size: 220KB - Virtual size: 220KB

5lwl9c Size: 320KB - Virtual size: 320KB

J8Mb8L Size: 328KB - Virtual size: 328KB

Jbp9qz Size: 292KB - Virtual size: 292KB

1gPTFL Size: 84KB - Virtual size: 84KB

PJutAx
Size: 2KB - Virtual size: 2KB

A9HxT6
Size: 1024B - Virtual size: 584B

.data
Size: 512B - Virtual size: 740B

.tls
Size: 50KB - Virtual size: 49KB

.CRT
Size: 512B - Virtual size: 8B

.RSRC
Size: 1.8MB - Virtual size: 1.8MB

M5MbUh
Size: 512B - Virtual size: 1.6MB

ZahJz8
Size: 224KB - Virtual size: 224KB

2QC8z9
Size: 220KB - Virtual size: 220KB

5lwl9c
Size: 320KB - Virtual size: 320KB

J8Mb8L
Size: 328KB - Virtual size: 328KB

Jbp9qz
Size: 292KB - Virtual size: 292KB

1gPTFL
Size: 84KB - Virtual size: 84KB