1169c15004bfaff774ac782ceb0bc614 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1169c15004bfaff774ac782ceb0bc614
Size

63KB
MD5

1169c15004bfaff774ac782ceb0bc614
SHA1

b049480acf2796e634442a0d7dde72381ee55357
SHA256

58e91c10459718474eb8a07b12c427cf7427f8c9e16f7f061e6144a64b9f7e56
SHA512

17f3a518604adbde8489883ce7c3beca273ff4ed551568f92f03eb9cae8ba823cacb658ab5f4417b26a6eb6e9f7298ed232b9897fb31bc1a9c385a6977f00ef5
SSDEEP

1536:Pt53SM6tn7YidjgCB2TShkrzu6z9UCRGRODQLe:Pt5ktfj2drzug9pRGMDWe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1169c15004bfaff774ac782ceb0bc614

Files

1169c15004bfaff774ac782ceb0bc614
.exe windows:4 windows x86 arch:x86

304b2597273db16d923b0f56111da061

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateHardLinkW
GetNlsSectionName
BindIoCompletionCallback
GlobalFix
GetPrivateProfileSectionNamesA
WideCharToMultiByte
VerifyConsoleIoHandle
GetPrivateProfileIntW
GetProcessAffinityMask
BackupWrite

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE