1cd1eabd044bb2df861efcb32f8a7591 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cd1eabd044bb2df861efcb32f8a7591
Size

2KB
MD5

1cd1eabd044bb2df861efcb32f8a7591
SHA1

2f7ca0cb7c52bb2a141959153f8dbdb0030695db
SHA256

396d676e175ac01a5800947a30483707b355353ce3ec464e5ef5c7ade9956332
SHA512

dbe1727b305b0d34d1aafc78e7ff787a40f0a38b539cb000d45612539ac0973467d847103080cdd4d11a7baad30fbea7dfbf01f25ac9bcecf1ebc1a2f9774e34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cd1eabd044bb2df861efcb32f8a7591

Files

1cd1eabd044bb2df861efcb32f8a7591
.exe windows:4 windows x86 arch:x86

434c1915d1b9264128b011d3a449ce1f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateMutexA
ExitProcess
GetCommandLineA
GetCurrentThread
GetEnvironmentVariableA
GetProcAddress
GetTickCount
LoadLibraryA
OpenFile
OpenMutexA
SetThreadPriority
Sleep
WinExec
WriteFile

wsock32

send
socket
recv
gethostbyname
connect

user32

wsprintfA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE