1355d4d803647e2bc31e86c77521d1d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1355d4d803647e2bc31e86c77521d1d6
Size

29KB
MD5

1355d4d803647e2bc31e86c77521d1d6
SHA1

27504129b86d9dbf10b799d9a845dfc5168ae2fd
SHA256

aee81791b72b0f51fee3e7d6cfa1b26048c700ba9c0f93b488143145fd2ea253
SHA512

d935c045f0a3714a993969cfc20c94f20e8a75e66ae69a1e5288cc9f46ecf253ddc9dccc1f2a3352c655535524d4018c1eae6af67c2b929117aa92eec25cbb9a
SSDEEP

768:UR5Cv36dARef9HVNzxvkKG5iXan2TTFfk:URov3CAQHVNzxvkL422TJM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1355d4d803647e2bc31e86c77521d1d6

Files

1355d4d803647e2bc31e86c77521d1d6
.exe windows:4 windows x86 arch:x86

bd227ba966c127e93fe82f25f211eaca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
ExitProcess
LoadLibraryExA
GetModuleHandleA
VirtualProtect
GetModuleFileNameA
HeapAlloc
GetProcessHeap
HeapFree

user32

wsprintfA
MessageBoxA

Sections

.data
Size: 21KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_cod
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ