a1ad569ed202968674232baba6ac2372 | Triage

Sharing

General

Target

a1ad569ed202968674232baba6ac2372
Size

328KB
MD5

a1ad569ed202968674232baba6ac2372
SHA1

25d999e7a3ba47a7553fcd67926035f7f66f95a2
SHA256

a13e291d1a6a2e34cf84320f36172f7a65d8d45d383d0a2afe798b025ad81c8d
SHA512

762b2ac7266f2737104ae6fa5ff06baa3efee7e990d2d68762bed456e928e7f2ea1197d63855aad0de980fb41bb76702593bd022655594e66749de58fc19262e
SSDEEP

6144:zQDsPUxwuJMUCv2GD9SdIbp2rX41YebNYdcp/7u01+LTux:6RuUIXxEzBQNYde7Ynux

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1ad569ed202968674232baba6ac2372

Files

a1ad569ed202968674232baba6ac2372
.exe windows:4 windows x86 arch:x86

21b0d74764a0e7477debfdf8222af3da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
FindClose
GetDiskFreeSpaceExA
ResetEvent
CloseHandle
TlsGetValue
GetDriveTypeW
GetLastError
EnumResourceTypesW
SetLastError
VirtualProtect
LoadLibraryExW
DeleteCriticalSection
GetDateFormatA
IsBadReadPtr
LocalFree
FreeConsole
IsBadStringPtrA
CancelIo
GetModuleHandleA

advapi32

GetFileSecurityA
LsaSetSecret
IsTokenUntrusted
RegLoadKeyA
CloseTrace
CloseEventLog
RegCloseKey
OpenEventLogA
LsaFreeMemory
LsaClose
AccessCheck
FreeSid
RegCreateKeyExA
RegCloseKey

glmf32

glsBlock
glsGetError
glsBinary
glsChannel
glsCharubz

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ