1a829f0c5217c6b1133a8ab2ca22217e | Triage

Sharing

General

Target

1a829f0c5217c6b1133a8ab2ca22217e
Size

82KB
MD5

1a829f0c5217c6b1133a8ab2ca22217e
SHA1

0b04da683367c6a5b30d3d753f5f73638595ecb5
SHA256

c6ea03ce29fcc21d772a2ee8d146e2012847b1d9b07d1d9c63aa8b306d7c3586
SHA512

865a470a89f341ed246cebd0c596d3eaff2c953957cf1b12c898cd904eb1c52086147fba2644b186cbbb4c47fe12bd6730719623c371a94e61b2f2c9dccacc2c
SSDEEP

1536:yLjmSpe0tKQIG2pwkCmjPKlheK44rteRmLPjR:yLMKIde3mjClO6L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a829f0c5217c6b1133a8ab2ca22217e

Files

1a829f0c5217c6b1133a8ab2ca22217e
.exe windows:1 windows x86 arch:x86

b0e17313e2418916dc0b4958f21c67f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
FormatMessageW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
GetModuleHandleW
SetLastError
HeapDestroy
WaitForSingleObject
HeapFree
SetUnhandledExceptionFilter
FreeLibrary
FreeLibrary
HeapAlloc
GetModuleFileNameA
Sleep
GetACP
HeapReAlloc
LoadLibraryA
QueryPerformanceCounter
HeapReAlloc
GetCommandLineA
GetModuleHandleW
GetTickCount
HeapReAlloc

user32

LoadMenuW
RegisterClassExW
GetWindowRect
GetDlgItemTextW

advapi32

GetLengthSid
RegOpenKeyW
RegEnumValueW
InitializeSecurityDescriptor

Sections

.text
Size: 30KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE