a1850b944f4f7a641e930b6f27cb56b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1850b944f4f7a641e930b6f27cb56b6
Size

271KB
MD5

a1850b944f4f7a641e930b6f27cb56b6
SHA1

14ab71cf5c2f9c1f576480d2d3d6442a11a7808e
SHA256

59e5778e4d57f33a3651ceccbb8c0d506e542f75fdd9237c820938c4500d2823
SHA512

f7c1b3c1c4a0b95bc5d9342a833738458d5897a02cd8ebbbb52ce4551977c5c3671429ae94aefa5e5df433d3f902fc7a0335f93dbac279e89814e5b4eb36b8c8
SSDEEP

6144:UZTv6xADi+3iBKkYPUMnJ32BQoI3jWiSdOGZQapO1:+TSQ3Gwn5YpkSpi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1850b944f4f7a641e930b6f27cb56b6

Files

a1850b944f4f7a641e930b6f27cb56b6
.exe windows:4 windows x86 arch:x86

b71d8c1931cb0a297806c1529ed52c6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualAlloc
ExitProcess
FindFirstFileA
GetCurrentDirectoryA
ReadFile
CloseHandle

Sections

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 267KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 532KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ