1ca6a7afc8b6499f678bc028d4a26ec2 | Triage

Sharing

General

Target

1ca6a7afc8b6499f678bc028d4a26ec2
Size

209KB
MD5

1ca6a7afc8b6499f678bc028d4a26ec2
SHA1

af9b08745fabd3a0e10c1a2a77cdf763d6a327a9
SHA256

06a5c92d1c389deb7f6d44e7f6757768b8e1b644d42470e38e823740f3037790
SHA512

d76b14354a90e9f749ab6749521eaa1e0f494497f3f57a99023c6962378147261ec7b7c83e252f6ec4bf01838c3c0d2f6ac542541358c1346d280c31bbe92655
SSDEEP

6144:yldkp+mud5VU5zfHCrfdvtPmDNMiQe00:ikpRNbirFFmDLQe00

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ca6a7afc8b6499f678bc028d4a26ec2

Files

1ca6a7afc8b6499f678bc028d4a26ec2
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 204KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE