1189b4c20ef9462ac3462deefed6149b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1189b4c20ef9462ac3462deefed6149b
Size

55KB
MD5

1189b4c20ef9462ac3462deefed6149b
SHA1

376801198b0f27b6ed6aba534b36e85bcf18f454
SHA256

5154d6e51860e21318fa04d1c84450b8f543b8db21d5f032ca9f246c275c7e98
SHA512

20c15afd55bfe5b2f92a36e33218894465edb10f61c84f84f164ac7c150ebc481962377abc6e4820057df5696d6e7f4d44922ac0ee6a421f450fefc68c54dfcc
SSDEEP

768:revFICm0on6HGavZUdQffoaFNnioNQp8GylFPVrqX9zm3yi53yO5GMuMQC3/z:G6V6HGavhgafRK9zm3VdyHfM1b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1189b4c20ef9462ac3462deefed6149b

Files

1189b4c20ef9462ac3462deefed6149b
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.
Size: 155KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.
Size: - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ