1fedb1d25d4a2aead8dffdc290adc044 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fedb1d25d4a2aead8dffdc290adc044
Size

6KB
MD5

1fedb1d25d4a2aead8dffdc290adc044
SHA1

6448263dad8c48ba3fb1fe9f2677c364f26f7e7c
SHA256

bbb8c3129b03d3358ccb72d37aacd34ddd4e15b623c1a57bd83cf0b1b38b584c
SHA512

3bee697379ad462a2a4b80b7cfd5e1ab93c4af80b426792154912611ef41ec1ed0d1e0b7cf94b5ef8c1c7966b689a301b252c77007178e7afe952df29aab23c9
SSDEEP

96:OcSvHpxHXx6dtyoCQejOueYD2SDwxJG9c/5tSpsQjkM:OcSfpxHh6OQeqvi2SUrGgKjk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fedb1d25d4a2aead8dffdc290adc044

Files

1fedb1d25d4a2aead8dffdc290adc044
.exe windows:4 windows x86 arch:x86

5eb35255fb32ce046ceaa347170c85e9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateFileMappingA
FindClose
FindFirstFileA
FindNextFileA
GetDriveTypeA
GetLogicalDriveStringsA
GetPrivateProfileStringA
GetProcAddress
GetSystemDirectoryA
GlobalAlloc
GlobalFree
LoadLibraryA
MapViewOfFile
RtlMoveMemory
SetEndOfFile
SetFileAttributesA
SetFilePointer
UnmapViewOfFile
WriteFile
lstrcatA
lstrcpyA
lstrlenA

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 658B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE