a1d957c8bdaa1f97fd3460c862029694 | Triage

Sharing

General

Target

a1d957c8bdaa1f97fd3460c862029694
Size

31KB
MD5

a1d957c8bdaa1f97fd3460c862029694
SHA1

a95b2bef157d9ee1103dd0cd3fa57c3546067411
SHA256

c692c360bbbc7a3b88eebacf9f8124086c702e13bb2d80714b987a9df31f7626
SHA512

3cae7179ac43ee350b75dd9d7af3792ff3e65522f9bed68917839ed977c3ac0327e6eadf3f7bfa491081bcef98947f7481a7d1ced08193d8cfa3b9b5fedde0d7
SSDEEP

768:2tsw+LUPiPH12XDDT2QgGIeAjUFXFdk6VaU7v5:s/+LUqV2XfRIfir7Vamv5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1d957c8bdaa1f97fd3460c862029694

Files

a1d957c8bdaa1f97fd3460c862029694
.exe windows:4 windows x86 arch:x86

76ad44d6d67d3d82e55350e3f753add3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetCurrentThread
GetStringTypeA
IsBadCodePtr
CloseHandle
LocalHandle

Sections

CODE
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 388B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE