1f2524d7374da0316e28ec05f683de79 | Triage

Sharing

General

Target

1f2524d7374da0316e28ec05f683de79
Size

32KB
MD5

1f2524d7374da0316e28ec05f683de79
SHA1

b6f5f8d5645ac9e0659c9bdbd40fba666038fb53
SHA256

38f8125d9a9be4a4fd4f7ad762a72de6dd6a40875caeb9d9d6d367164436d462
SHA512

b31f23d1ee4aee1a8753238f7b26b3e670d77bc93043f69275a264145a36ef954fe5f3612b7090d0cff12f7ea9f8579d77a1bbb9ee2c73dc43ebc2b4f4591577
SSDEEP

384:EnNG5xuHN4cmlrQOLqWcyy6rTh6o8jNqo9irkcegCEyYCJAGTkbuGJllP:EnNG58CcyPvh6ooU5ZCEGAblJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f2524d7374da0316e28ec05f683de79

Files

1f2524d7374da0316e28ec05f683de79
.exe windows:4 windows x86 arch:x86

25699022503331ef09ef02e009de6581

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
OpenProcess
GetStringTypeA
LCMapStringW
LCMapStringA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
GetStringTypeW

user32

GetWindowThreadProcessId
FindWindowA

Sections

.text
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE