1cd807b98092e52fa94f03b20fd324ab | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cd807b98092e52fa94f03b20fd324ab
Size

16KB
MD5

1cd807b98092e52fa94f03b20fd324ab
SHA1

64ce334e0b533e637f36db3af68374eae315105c
SHA256

ba745a5bedd15f8445016053a66d0de7a44d8b20a8fb9e66671226f618f63d3a
SHA512

a1244684ea74736f7ca409d681c272a0ea2aa078877bbcd1455fa68eb98d55ee61b58cc496687b80cede91ecea36905be073b0843e7bd8e2cf11feccacd9325f
SSDEEP

384:96qeBBttPObnJNVNNNNNNBPtb5xIUwGMGasNNNNNN4GSLt4WNNNNNT:kqQBfPozPPovGa9fK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cd807b98092e52fa94f03b20fd324ab

Files

1cd807b98092e52fa94f03b20fd324ab
.exe windows:1 windows x86 arch:x86

efcb097e210ba1913372f39bd91b0557

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateProcessA
ExitProcess
GetFileSize
GetModuleFileNameA
GetProcAddress
GetTempPathA
LoadLibraryA
ReadFile
SetFilePointer
VirtualAlloc

Sections

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 370B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE