1bd58e1fe501d336ee593a8c645f6e4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd58e1fe501d336ee593a8c645f6e4b
Size

50KB
MD5

1bd58e1fe501d336ee593a8c645f6e4b
SHA1

059db786625827f76a8d985893a0f0730aca77d4
SHA256

85d7b929d02b89376b2f811cff77dc8aa33037291464c83a00150c10f99a887d
SHA512

998362ce3fd0d43b20b6cdb57f333595e06f47e55a865c04da810c82b347d118fb7daab773d79fcf16e79bbf7067e272cd0ac1990426081b8faa01f33f20f799
SSDEEP

768:PyMVIAm+Vu/yTkUsHe5kLkVEYNG7Mhuj03stz0kr9sAO8AktNfC4wpdWVMer1:agZVu/SsHeQAqMcTXraAhLCF8MeJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd58e1fe501d336ee593a8c645f6e4b

Files

1bd58e1fe501d336ee593a8c645f6e4b
.exe windows:4 windows x86 arch:x86

28c6ef1128d2dc0d513ddf64919b7716

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ