15a1c7a8b6fc88a3fde19aba9849f6c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

15a1c7a8b6fc88a3fde19aba9849f6c1
Size

12KB
MD5

15a1c7a8b6fc88a3fde19aba9849f6c1
SHA1

41375f873c5d5ea0c399506c639c510ce39aa64a
SHA256

1209fc424ff264da4b9c1b1965b022c779b0f925b56cdbbc5ca70d3b09931793
SHA512

0947755f0120be729c4a9fe37acde48511529a9c9f32a8f8f076cd5a4dc6803d9bc6542f7a2e6b1ca57902ee294e89e02d8f5cd6cb88af6ab3874fe7afdb3969
SSDEEP

48:6VXmjoWG2I3Katp39tUrh6yzuAUN+rsDYEMymG40vbvuqw5bI/TaFTw7EK6ZYevx:cHWwtD+lrzuAUdDEYruMX71yQtQKQYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15a1c7a8b6fc88a3fde19aba9849f6c1

Files

15a1c7a8b6fc88a3fde19aba9849f6c1
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ