a1692dd9d5f86ca697d2bb6f5431dae9ca5a8795b563d89a760eed634faa57cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1692dd9d5f86ca697d2bb6f5431dae9ca5a8795b563d89a760eed634faa57cb
Size

5KB
MD5

47970e5800dfeae848ab78bf6ec84675
SHA1

58c62e43b52e29e7f33c682877289c0af2c21880
SHA256

a1692dd9d5f86ca697d2bb6f5431dae9ca5a8795b563d89a760eed634faa57cb
SHA512

9392eee2081617eafc7216ff7c4e4af8554dc042acfb3825703a9f79ecb192c16e3c8d585fe618ecea6c8cdb92c236b384926d7ae5622b103ff263f133a02c08
SSDEEP

48:SOVlXWFPpT+dXVfzZh4yMGcKzMEkTaak4PAZivO2pB42pBdvMZL2R7twRuqSxp:FLWLkFfNnOKYloIQ2pm2pbYScxE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1692dd9d5f86ca697d2bb6f5431dae9ca5a8795b563d89a760eed634faa57cb

Files

a1692dd9d5f86ca697d2bb6f5431dae9ca5a8795b563d89a760eed634faa57cb
.exe windows:5 windows x86 arch:x86

7c5f9b19847a4e36080308f0e2c5add5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetModuleHandleA
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
CloseHandle
VirtualFree
GetProcessHeap
CreateFileMappingW
MapViewOfFile
OpenProcess
UnmapViewOfFile
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 538B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ