1c441652653df309c9b447358945b86c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c441652653df309c9b447358945b86c
Size

43KB
MD5

1c441652653df309c9b447358945b86c
SHA1

c61ae8b8c4654e6e17ffc16779a697a25005ac66
SHA256

cac74eea04b46d37ae072561096f9367cd78775a5c40cad33d6c435a1501dbf5
SHA512

1271e49f0f187d8eedba1c225876db6433f0cd21a43b1245904bc02adeaeaa4b1da4a9ae3e1a3aab23b90f7a9f886ee5e826074ce5dddbf8b84cd7e9b4f004eb
SSDEEP

768:f21RNTmuK1Op5e5XARCUYq18NnSXl9zMu9:f2PJm+paXAfYS8R2l9d9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c441652653df309c9b447358945b86c

Files

1c441652653df309c9b447358945b86c
.exe windows:4 windows x86 arch:x86

01b80b4dbe0d78c3565ff076b9b88ecd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetModuleHandleA
GetStartupInfoA

msvcrt

exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_XcptFilter
__p__commode
__p__fmode
__set_app_type
_controlfp
_exit
_except_handler3
free
calloc
_adjust_fdiv

advapi32

RegQueryValueExA
RegOpenKeyA
RegCloseKey

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE