a1dadfe8d5da9de6c0a7ab6296694234 | Triage

Sharing

General

Target

a1dadfe8d5da9de6c0a7ab6296694234
Size

20KB
MD5

a1dadfe8d5da9de6c0a7ab6296694234
SHA1

6ebef418cc18f2007656d1767526717b40eb6a1a
SHA256

0a55769a11e7c62aefb42c2a02f7ef41de424e680a9a404a8174307901ad4db1
SHA512

62b97b030a3183701402c400df6d4a21fb42a45f935755867849d997dc1466127f61fb0c9442359cf8a4e57cb5600d8da13cd7f4428f5af4c6a5c1dfd0bbefed
SSDEEP

192:uC0CKOYgwYHVdrkKYesp5smyfP1oynV5Aq:uC0n/Jkv2e1Pn1v5A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1dadfe8d5da9de6c0a7ab6296694234

Files

a1dadfe8d5da9de6c0a7ab6296694234
.exe windows:4 windows x86 arch:x86

5b3d28d3273b913d31c9dd299d3c1936

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord668
ord1980
ord3181
ord3185
ord4058
ord2781
ord2770
ord941
ord356
ord2818
ord6283
ord6282
ord665
ord3790
ord354
ord860
ord540
ord940
ord800
ord541
ord6143
ord536
ord6883
ord939
ord801
ord5683
ord4129
ord858
ord537
ord6930
ord535
ord4202

msvcrt

_except_handler3
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
__p___argc
__p___argv
atol
srand
rand
__CxxFrameHandler
time
_stricmp

kernel32

GetSystemDirectoryA
GetModuleFileNameA
Sleep
GetTickCount
WinExec
CreateDirectoryA
CopyFileA
DeleteFileA
MoveFileExA
GetLastError
WritePrivateProfileStringA
GetPrivateProfileStringA
GetModuleHandleA
GetStartupInfoA
GetTempPathA

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 352B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE