a1531589fa8754b09897d9650b966e23 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1531589fa8754b09897d9650b966e23
Size

404KB
MD5

a1531589fa8754b09897d9650b966e23
SHA1

2403e67a91aa0fc66e8c72f4183013f1a9608836
SHA256

40a96ddfde3a3673da88a1d8d4dfab9aa2144eec3f52a1f0706a1b689ad2ce18
SHA512

92de3d8e62266b00c3bf5da49937148b836cf271f3f8042960ba369897492e93faae0518f8f9d58a745ff37573aba08d31571d4173587014579215c0376e0805
SSDEEP

12288:mAB02Z5hVOg80nTFToCgQcbzdMweKMMi:mb2Cg80hToCgQcPdFbk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1531589fa8754b09897d9650b966e23

Files

a1531589fa8754b09897d9650b966e23
.exe windows:4 windows x86 arch:x86

9e976541636e8f8af2199e4495cffedd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
lstrcmpiA
GetProcAddress
VirtualAlloc
GetTickCount
CloseHandle
SetEvent
CreateFileA
GetModuleHandleA
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
HeapFree
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStringTypeW

user32

LoadIconA
LoadBitmapA

msacm32

acmDriverDetailsA

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 725KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ