1a932a6c815031b5c004c19282ea2368 | Triage

Sharing

General

Target

1a932a6c815031b5c004c19282ea2368
Size

344KB
MD5

1a932a6c815031b5c004c19282ea2368
SHA1

cab9b7370ec6fb882186ee70735e749dca796ded
SHA256

bc1c52e23d301901e892e4dc58dcb319d83a346354688d53ff9a018e7a9876ad
SHA512

8563bb0b9f3951c814c8a503892269ff1318501dfa2d37335512d53d7fabbc8439f13f885131354438c2e3aed3c7dca179fe6b920903fffd8918ab590d31d7ed
SSDEEP

6144:prOYeg8hY2Uw/M9sKBsEhPSVqW6kti4zDDcyMHKi4OTxXVmev+0nrY2OM5t:U7g8hYLa/4SVN6EzPcyMHKBOTxlmev+1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a932a6c815031b5c004c19282ea2368

Files

1a932a6c815031b5c004c19282ea2368
.exe windows:4 windows x86 arch:x86

b5cb147a043775fa995dbb94670cd866

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetLastError
GetModuleHandleA
VirtualProtectEx
GetTempPathA
GetProcAddress

advapi32

ConvertSidToStringSidW

avifil32

CreateEditableStream

winmm

midiInClose

Sections

.text
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 500KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ