1229de67fd30ad1625a79ee2c3b2062e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1229de67fd30ad1625a79ee2c3b2062e
Size

15KB
MD5

1229de67fd30ad1625a79ee2c3b2062e
SHA1

664b2930436a8e61adf45be2f95db1f6cf1221ee
SHA256

24d79703d0ab32ed55e473f4b24c5fb56b28a017f1c5182a1327f2c678f95f1d
SHA512

905aefc29ff88783e5fe3f49dd155abadeb9baa1c4866bd71fddcdedd2130835b15140fc2eae18ba3ad53a133a92ba63b87847b1adec1e428df618d918f335af
SSDEEP

192:QqtbRloEPcRKckFWBcEFJYsEmyzZhsIzDtk0HjQvWDWHofKizJcKaRzA:Q2FloE0cckFWBjFWsbUhvbHbaeKK2R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1229de67fd30ad1625a79ee2c3b2062e

Files

1229de67fd30ad1625a79ee2c3b2062e
.exe windows:4 windows x86 arch:x86

0b73cda72d2f5cb6bccc46f6ee7d366f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateWaitableTimerA
ExitProcess
FindResourceA
GetLastError
GetProcAddress
LoadLibraryA
LoadResource
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepEx
VirtualAlloc
VirtualFree

Sections

.text
Size: 1024B - Virtual size: 796B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lfaxean
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE