1a65bcaac22d1d1c8f93577130dc71c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a65bcaac22d1d1c8f93577130dc71c5
Size

75KB
MD5

1a65bcaac22d1d1c8f93577130dc71c5
SHA1

5268da7c35cd9522418ebbcb3a343ab94036103a
SHA256

41e44e0f91e22e0563aff713a4c3f287616dcdf0ba1a2c65db7da2aa12747eed
SHA512

acf8876367b5726825cabffdf02e46834e43a1e182dc6b393c30741c84a38a5a1f90bb787bc1315326e569ff42d057986b4242e0a58723ed092a3ff6d599b4b9
SSDEEP

1536:GSn/cfRQ85hwtCVwvNKH2hjE3ZW3mNVZ:GgcfRQ8gtg7WhjgW3mNV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a65bcaac22d1d1c8f93577130dc71c5

Files

1a65bcaac22d1d1c8f93577130dc71c5
.exe windows:4 windows x86 arch:x86

0c87a268394f0d777350621b3b6a724b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
SetEvent
GetTickCount
GetFileAttributesW
SetLastError
GetDiskFreeSpaceW
HeapCreate
CreateThread
ResumeThread
GetSystemTime
GetModuleHandleA
LoadLibraryW
GetComputerNameA
ReleaseMutex
FindAtomW
ResetEvent
LocalFree
lstrcmpiW
GetCommandLineW
CloseHandle

user32

DispatchMessageA
SetFocus
DrawStateA
GetDlgItem
GetClipCursor
GetComboBoxInfo
CreateWindowExA
GetKeyState
DestroyCaret
GetClassInfoA
CallWindowProcA
FillRect
CloseWindow
MessageBoxA

cryptdlg

CertConfigureTrustA
CertTrustFinalPolicy
CertTrustCertPolicy
CertTrustInit
DecodeRecipientID

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE