13d0fc0d519fd29683ba4356bddb78f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13d0fc0d519fd29683ba4356bddb78f4
Size

63KB
MD5

13d0fc0d519fd29683ba4356bddb78f4
SHA1

6aadb4db3a42ae612c75848c15694d99005d53a7
SHA256

f9899b5a9cba4e1bf482b34c1539bae55d21518a097d4ff711ed75f36a79c9d8
SHA512

5f8b61eed373f141dc1e668d0be66c19b1742e2019d95a51a9e578e0712900d862754ac543368617b3628de753df6a076cf7c6e4f5cd8d390a98c7830d4cbc7a
SSDEEP

1536:xiamPvyW3J5+gx6rOAGr+m9+OAYEfhX2IJbTGY/lFjdyh7:xavhD++PAVfsI1TGY/lF5k7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13d0fc0d519fd29683ba4356bddb78f4

Files

13d0fc0d519fd29683ba4356bddb78f4
.exe windows:5 windows x86 arch:x86

2921615adfbb658d6aa0f35720b8f430

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetFileSize
HeapAlloc
HeapFree
GetProcessHeap
WriteFile
Sleep
ReadFile
GetTempFileNameA
LoadLibraryA
GetModuleFileNameA
CloseHandle
GetTempPathA

Sections

.text
Size: 512B - Virtual size: 334B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ