a1589b20fa42b6632b5b9e8c99e1b961 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1589b20fa42b6632b5b9e8c99e1b961
Size

4KB
MD5

a1589b20fa42b6632b5b9e8c99e1b961
SHA1

8940daf430cf5604bd09570159d839f0cc2b9561
SHA256

63838baadf335c0dcb07e020d81dbe1e6c3afbf9c9ba7330c9d820ace88576cf
SHA512

06d404c617984ad3de7cd1930f6e9f9f30357df6058c634d26829ffb8a78a4a92cccba7528a24c433c9ee32d2f3a4f58a5a50e6a70ae90fd189d72cffbeecc6f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1589b20fa42b6632b5b9e8c99e1b961

Files

a1589b20fa42b6632b5b9e8c99e1b961
.exe windows:5 windows x86 arch:x86

35ed93bae40e50382a68e058273898aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetCommandLineW
GetSystemDirectoryW
Sleep
CopyFileW
GetVersionExW
GetProcAddress
LoadLibraryA
lstrcatW
DeleteFileW
LocalFree
SetFileAttributesW

shell32

CommandLineToArgvW

Sections

.text
Size: 1024B - Virtual size: 562B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 812B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 192B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ