1c0c66856b825157c3448edfca5e5b2b | Triage

Sharing

General

Target

1c0c66856b825157c3448edfca5e5b2b
Size

41KB
MD5

1c0c66856b825157c3448edfca5e5b2b
SHA1

9e69142b68538e48b0306d074b01c6c2b19325db
SHA256

32bad9867d0c1b8855fa812b3c257c0edfa9a294d67f9a8d518819d1dd905c27
SHA512

5850248806095a128ccf12e14ea416e0c20346e1bc913cd720c30ad25db96c40dd6b1f3778b3821aba168f1d115b33132dee7fc389cb9eb9258c6aab2e81d5be
SSDEEP

768:ltLxvBs3hvzeVb/psixkvJ7rIxgF+Lb3SNjL5c21ZSyFEtM+1qndNPa26CgWQp:6zMOi2vJ7ag6ML5AyCtM1viC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c0c66856b825157c3448edfca5e5b2b

Files

1c0c66856b825157c3448edfca5e5b2b
.exe windows:4 windows x86 arch:x86

90413732f406b144a94ffeb0a3acdcb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strstr
strcpy
strlen
??2@YAPAXI@Z
_spawnl
_stat64

kernel32

CreateFileA
VirtualAlloc
VirtualFree
CloseHandle
ReadFile
WriteFile

Sections

.text
Size: 15KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE