1ac60b5775f283a8b44851602f540e01 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac60b5775f283a8b44851602f540e01
Size

76KB
MD5

1ac60b5775f283a8b44851602f540e01
SHA1

5cf4a2bf9aee1f0f61ed4f977dd0b7ef3f945985
SHA256

c98c8f1155aa4aa417078c5bf0cf941bbefdacf5ea17c49292732892eaaaad35
SHA512

05b35cc7ee2ec9b9208fca6392410678a5909cddcc158928fa8e2d56d401c878d6269828128ff595a09d00048d19f7429542adecc7476a675a1ec86981d13098
SSDEEP

1536:CthQpPXlLYIzKPycLDKoShK5fjGQZXu9OByBey:CthaP1TIGvcLRByBey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac60b5775f283a8b44851602f540e01

Files

1ac60b5775f283a8b44851602f540e01
.exe windows:4 windows x86 arch:x86

26aa165cb09d964b16af94a03e723291

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
GetProcessHeap
GetProcAddress
LoadLibraryW
SetLastError
GetLastError
FreeLibrary
HeapFree
GetVersionExA
LoadLibraryA
GetCurrentThread
GetCurrentProcess
lstrlenA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
TlsGetValue
TlsSetValue
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSection
GetLocaleInfoA
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WideCharToMultiByte
LCMapStringW

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ