1fec5dd66fd5d7f143a41d73fa1ad6b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fec5dd66fd5d7f143a41d73fa1ad6b0
Size

765KB
MD5

1fec5dd66fd5d7f143a41d73fa1ad6b0
SHA1

df871c389cb042da924d18269cb2886f8a168bf3
SHA256

8dcd23023a529577255add96838527a88c9c27eec54d52b9082838a30c4e28dc
SHA512

02e82be4966db31988b5595e7167d89963b744d11a093edf569c43e9c0b340da132bb586d2901b0c01d8c4ffc3bf7c9ab7cab27497d207f7c4ba85954d7eb2fc
SSDEEP

12288:lYPkUn+K0x4Nti21eKyAFOKTHH1ZU1niv+epZ4v2h2r9wYJ8WL3//zRv7+6xy2BL:mPkUT02/1dwi16i2+y2USU8WLj1xySw4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fec5dd66fd5d7f143a41d73fa1ad6b0

Files

1fec5dd66fd5d7f143a41d73fa1ad6b0
.exe windows:4 windows x86 arch:x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.Kaos2
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Kaos12
Size: 762KB - Virtual size: 764KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ