1a8ff5d705b080b6ec5858146a741b4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a8ff5d705b080b6ec5858146a741b4b
Size

197KB
MD5

1a8ff5d705b080b6ec5858146a741b4b
SHA1

4f55a11b58374d5737255abb13243b32eed39848
SHA256

f0105ad0668e560a763da4ddb082d04dbcffdfc016211bab76ab58e140f2cfd1
SHA512

e73a6f68060c275408b0bace4387c86a0ef8242c3ae54372d3d9ba5e57965c8686cf4246f7a6d2007c1fa5d0f88541f27ed7a82dbab2d0a9e3aa4d00aef103ea
SSDEEP

6144:9IcGd5vba7o2yYkB9o3ymdSwE7cl7Iov:9uTa1yffmdSwdIo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a8ff5d705b080b6ec5858146a741b4b

Files

1a8ff5d705b080b6ec5858146a741b4b
.exe windows:4 windows x86 arch:x86

9a726d325d24827961f3d06d68707d04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetCursor
GetFocus
IsWindowUnicode
RemoveMenu
LoadBitmapA
DrawAnimatedRects

kernel32

VirtualAlloc
ExitThread
GetThreadLocale
LoadLibraryA
GetModuleHandleA
MulDiv
ExitProcess
GetFullPathNameA
LocalAlloc
GetDateFormatA
GetProcAddress
HeapDestroy
VirtualQuery
GetVersionExA
LoadLibraryExA
GetACP
GetVersion
GetLocaleInfoA

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ