1264914d99a0878e95f0f056e7f263ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1264914d99a0878e95f0f056e7f263ba
Size

20KB
MD5

1264914d99a0878e95f0f056e7f263ba
SHA1

2298435ccf14a741c16679eb9b39891db20c1994
SHA256

e2e1c9831ce9a0fc8286326ba53552658b57af49c728487a96785d0cdf5eb94b
SHA512

03df14001264ca2f7d9f0932a6615d6427213e8ebc9a9caeda05fc7de68b0ea18037c7f05da31b397402fb4c43e250325da97ac822a1ffee7b456df919a249e5
SSDEEP

384:nDBY/eAx1jGyBWfB9TXGcha6LC7kzibVDxc+XyrSdD8YKpCgHiSnoD4vupf:kbbBW3Xrh4kziU0uSFBgm4Wp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1264914d99a0878e95f0f056e7f263ba

Files

1264914d99a0878e95f0f056e7f263ba
.exe windows:4 windows x86 arch:x86

9ecec8d061f4c304a71968a1a1d81b01

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
HeapAlloc
HeapCreate
LoadLibraryA
VirtualAlloc
GetCurrentThread

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ