a1a8b9c13360898aebd46c12abee7018 | Triage

Sharing

General

Target

a1a8b9c13360898aebd46c12abee7018
Size

274KB
MD5

a1a8b9c13360898aebd46c12abee7018
SHA1

03bdba42f863a52b325eed51b8b39d4f91b27077
SHA256

f11939bf24b075fec37a952e68bc0a9b94eca67dd105d4a9d58e8925a744b263
SHA512

b65cec6b7f4313ea4f2ceb297c496bfe8b3da46d0f683e073f353bd02d02d25779dee5fcc95b3b7e4e61ec4cef6f1980a4b59533530f78316d209bc1e73fd2e7
SSDEEP

6144:KzPvmPqyDRfTCMVsVXlmd/S9nUg6f2SBn8kUBMyTcRTZQ:ImPFO/Xsw9Ug6f2OFUqyToN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1a8b9c13360898aebd46c12abee7018

Files

a1a8b9c13360898aebd46c12abee7018
.exe windows:4 windows x86 arch:x86

f1dbd286eb778e7f71130488529c9524

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciSendCommandA
sndPlaySoundA

kernel32

TlsSetValue
AddAtomA
TerminateProcess
GetLocaleInfoA
VirtualFree
GetEnvironmentStringsW
InterlockedExchange
SetHandleCount
GetACP
SetEndOfFile
GetVersionExA
GetFileType
GetStartupInfoA
EnumResourceNamesA
TlsFree
FreeEnvironmentStringsA
HeapSize
TlsGetValue
VirtualAlloc
GetStdHandle
SetLastError
GetModuleFileNameA
IsBadStringPtrW
GetSystemInfo
HeapCreate
GetCurrentProcess
FreeEnvironmentStringsW
IsBadWritePtr
GetEnvironmentStrings
TlsAlloc
UnhandledExceptionFilter

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

shlwapi

PathAddBackslashA

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 134KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 392KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ