1a543539af7fac004278c76c2c9eee48 | Triage

Sharing

General

Target

1a543539af7fac004278c76c2c9eee48
Size

77KB
MD5

1a543539af7fac004278c76c2c9eee48
SHA1

b442831656c19304d4094339fe3862adc4a38482
SHA256

9cdc3e215ca54c88ffcf60399e419ff05f306cfdb950c81b9ac1d0a06e256785
SHA512

3eba8f61feec59cee49cf781f2e01512cf6f2fd3a6709375efa23e51882d7ee3ad546d511eb2d53589c48f1ba2f9c74e9868bdf1e4f02d403f9555e540842990
SSDEEP

1536:tPe3N/MB79KaOfk2TtrwDuQXyCT8Zbr27wzPVwB98XqGy:t29/w79LeaDugyC227mPVwBdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a543539af7fac004278c76c2c9eee48

Files

1a543539af7fac004278c76c2c9eee48
.exe windows:4 windows x86 arch:x86

b5bfb5b265d57fccefefb45a7b002817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetDIBits
GetKerningPairsA
GetArcDirection
GetFontData

user32

GetAltTabInfoA
GetDialogBaseUnits
GetMenuStringA
GetMenuItemID

kernel32

GetConsoleAliasesW
GetConsoleTitleW
FindAtomW
GetProcessVersion
LCMapStringW
HeapAlloc

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE