1a35f94f21ad72745579eeac91d45fbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a35f94f21ad72745579eeac91d45fbe
Size

17KB
MD5

1a35f94f21ad72745579eeac91d45fbe
SHA1

f77f39953dc10baf9065009205232fea84b737b0
SHA256

f1b82807947dc0b3e9a2fc2f554b350cefc24e01f0cb0ade89cf2bd82ac6c760
SHA512

dea47d6b54a4190fd44abdbb8cf8856ad745c73b053af24126a2e10d06150c7b7e0b1e7b5d295d839bfeee778eaf470b910e940983260c3221b7625066f7a7a6
SSDEEP

48:64XkntQItCG33WetBWvAVoqBW1Mo5jBUr8WeXHKvf9wNQt1TE9b+2PYyHrzvdW5W:23t/HD8WIVj8iNQk9bB5rzvdWrQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a35f94f21ad72745579eeac91d45fbe

Files

1a35f94f21ad72745579eeac91d45fbe
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ