1af44d016dd4e2a2d061c7a3df809a9d | Triage

Sharing

General

Target

1af44d016dd4e2a2d061c7a3df809a9d
Size

41KB
MD5

1af44d016dd4e2a2d061c7a3df809a9d
SHA1

094c7e962fd5ae0298a9841d086406d5aa239fd3
SHA256

46eddaa8a855e8ee7a5639971c6110a8379d55846abd2b9b347bbd0f911e6d60
SHA512

ad9287ea6574db87be747066c4ad3990ac0e7d441b13b6f020596c1a5985b47def8c521c041776338ce16ab0ca452fa1f38045804457d7fb7cfe7349a6894a67
SSDEEP

768:P2JVITlWzPjrpYbblzgArbodtyzZhUdq0WCZFVtM1VgefDdlF7eEf/L1l581R:P2wlzlrbodWiZFVt2nD7F7eE3L8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1af44d016dd4e2a2d061c7a3df809a9d

Files

1af44d016dd4e2a2d061c7a3df809a9d
.exe windows:4 windows x86 arch:x86

bb6f998b6ddc55b66574b1645d6a380b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
GetModuleHandleA
GetTickCount
HeapAlloc
GetProcessHeap
HeapReAlloc
HeapFree

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 206KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ