1a6e528abb5751af5934578f7c8c9eb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a6e528abb5751af5934578f7c8c9eb5
Size

20KB
MD5

1a6e528abb5751af5934578f7c8c9eb5
SHA1

697e0343a875cbe6befa98e3451cd590311c2382
SHA256

cbce05e1191e430566eca3a948efc9f37f65bd281127e2b6d03b6aa07e0e5857
SHA512

4fc7bb5ff47ad05473469adccbd8f457b91bc8fe0961d4b11e44de8c643f14e8dd34f2d47d8685654c54867d6dd285f2549919979a07ea4575a37ee76fa394c2
SSDEEP

192:vhnUXLTrJR7O4feuLxUmPGDROo6w8/1JxbtF/oZey6yj6d8:vNUb5RCu9UYGDROo6wkJxPwZf6yjk8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a6e528abb5751af5934578f7c8c9eb5

Files

1a6e528abb5751af5934578f7c8c9eb5
.exe windows:4 windows x86 arch:x86

a7aaf5f65e742cc5ca8a778091d17df8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
CloseHandle
GetExitCodeThread
WaitForSingleObject
CreateThread
GetProcAddress
GetModuleFileNameA

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 870B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 892B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE