1a764be5373ab5940731f21593af116f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a764be5373ab5940731f21593af116f
Size

116KB
MD5

1a764be5373ab5940731f21593af116f
SHA1

896f7a4bfa0c63276a046fca92a230e2b6c2a45a
SHA256

c769cda2874b8698c7f8d788900bbdb1bc4688920ea77d056d18e0e5eb4bf52a
SHA512

202e01971a48f20811d9a1c52513ea7e982bf2652976bce4b08e399df879899f6383c93b0b4a16a1bdd13f41a254bba7b48a62731c41e77281b087f9348ccb3c
SSDEEP

3072:KvR26cuq6F2K77JX+XFutdOQmLmBv65A2OoF+Jm:KvWR9K7lR5BMA23F+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a764be5373ab5940731f21593af116f

Files

1a764be5373ab5940731f21593af116f
.exe windows:4 windows x86 arch:x86

adec813be96b7bfe1f94f94f8a2f3377

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentConsoleFont
ClearCommBreak
GetProcessWorkingSetSize
SetFilePointer
FlushConsoleInputBuffer
GetProfileStringA
SetConsoleDisplayMode
IsBadWritePtr
GetUserDefaultUILanguage
QueryDosDeviceA
SetCommState
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

atsec0
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

atsec1
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

atsec2
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.atsec3
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ