10a2991d0f828feb2c9352ef533fc8b1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10a2991d0f828feb2c9352ef533fc8b1
Size

44KB
MD5

10a2991d0f828feb2c9352ef533fc8b1
SHA1

f1898c8216bd3cafc577992ea233ad1ac849b958
SHA256

6587519f610757e911b4387ea4d27633f48e17847658853286512757d417dd50
SHA512

435e4c0e4543fe19600891fe4ea99a28babce07968495ebf6eb7cc144e2f9f6a806ce903a9287f63ccd53ace0c7afb10cfb4eae142a3536af910966164ec5f9e
SSDEEP

768:AizsYdFMlZ37usd64utHrG0UjRlTV7VPE8xASR30VCyVVVVVVVVUM:6YdFMlZLusdjutLZUlx7pEY2VZVVVVVV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10a2991d0f828feb2c9352ef533fc8b1

Files

10a2991d0f828feb2c9352ef533fc8b1
.exe .ps1 windows:1 windows x86 arch:x86 polyglot

29bd3ba3bda40d12c805a60c6463dcdf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetPixelFormat
GetTextFaceW

kernel32

GetProcAddress
LoadLibraryA
UnmapViewOfFile
VirtualAlloc
VirtualFree

user32

GetMessageW

Sections

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.code
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ