1c081d40ecb6895668f4020000e4f2c9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c081d40ecb6895668f4020000e4f2c9
Size

29KB
MD5

1c081d40ecb6895668f4020000e4f2c9
SHA1

20e4e899229dd88b123bbf7557227db78d2392f6
SHA256

9f928746b6dc01c751fcd48dcc05ca3a4de862b9a298e099119e8da031a4547b
SHA512

48dcc860e5c2257cc646a93ad512d48f9c77ba48665433871bb6b23f5edb9a1985abcdd9997bda511d95bd07c7a523d333b161b9adb5cc6f96a03909367124dd
SSDEEP

384:0SQjcEZB9G8B2U4PyvL5IyA+I3NdeKFNTw4mLvrPkQp1tEA/H0mC3EHLXyVr:0nAcB9G8B94KXA+I3DWkwcqHQ0e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c081d40ecb6895668f4020000e4f2c9

Files

1c081d40ecb6895668f4020000e4f2c9
.exe windows:4 windows x86 arch:x86

c6bb0de3943eb1bd41df2be358de09c0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
GetTickCount
ExitProcess
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 928B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ