1278a618c9f58d0f8b64a781f9d21ee6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1278a618c9f58d0f8b64a781f9d21ee6
Size

132KB
MD5

1278a618c9f58d0f8b64a781f9d21ee6
SHA1

8798addb37f0e0bf8f489eaf61e88084ca5a84e2
SHA256

8e3183ae7f42e14e7e02294c17edfa3173d478b0f775e907bd87a1d359976d36
SHA512

1f5fb8f68881a10ed5016a8230e6a8b6b5cbf5b00941cb73b501a78f778ceeed85cae80ba1ae97188efb500e7d5825978b5f5d5da1e861670b03b5b57bb5db3f
SSDEEP

1536:9CdI8ylUYPZkTTXSz7SyYMLx76rQVGvCmBUTP2BVolq1uzKsO+nwmMHsT1150:9r8yyYBYSzWfMLRG3vCa0tzKT7BU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1278a618c9f58d0f8b64a781f9d21ee6

Files

1278a618c9f58d0f8b64a781f9d21ee6
.exe windows:4 windows x86 arch:x86

7bff5ec910b37150b3ae581c7280fa30

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorPosition
ReleaseSemaphore
GetCurrentProcess
ExpandEnvironmentStringsA
DelayLoadFailureHook
lstrcat
SetConsoleMenuClose
CreatePipe
GetHandleInformation
GetCurrentProcessId
ReadFileEx
NlsGetCacheUpdateCount
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

itext
Size: 8KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ