1fda39f3dfc7b5b40b03376dc1f46105 | Triage

Sharing

General

Target

1fda39f3dfc7b5b40b03376dc1f46105
Size

62KB
MD5

1fda39f3dfc7b5b40b03376dc1f46105
SHA1

abeb3f841e1868daa1ad372e7bd9f57055cf8be1
SHA256

8df14fd2417c7e5b764f3adb4ff29b64bd3161fbdbc914232da4dfab8f08247f
SHA512

0925ae4443e4838a8bbe39996f1db6abe821c0ea001f10930b771acb426a0a8e18f4ce6231fbdfa29cfe9676a85355b217e3328c7034677a1cabc944b7ecf4a1
SSDEEP

768:4NAj+BynOHlkcjhCxHNp6GEF1pfnb3VqFt4L8UgiAuUZbnqjuIYjs9rb1qGTue+L:4No4juK/EmL8R3Z2juIOs9PCmjbVY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fda39f3dfc7b5b40b03376dc1f46105

Files

1fda39f3dfc7b5b40b03376dc1f46105
.exe windows:4 windows x86 arch:x86

ddc37b013db327b84877223d5dc13744

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WTSGetActiveConsoleSessionId
InterlockedFlushSList
OpenThread
ReleaseMutex
GetVolumeInformationW
GetTimeFormatA
IsBadReadPtr
GetCurrentProcess
GetCommProperties
GetEnvironmentStrings
InitAtomTable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE