1fcdccb545217ee3de5ac94428eb3b0d90d4b8a0c234ec3c9ca895bc76b4e2a9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fcdccb545217ee3de5ac94428eb3b0d90d4b8a0c234ec3c9ca895bc76b4e2a9
Size

43KB
MD5

3e438ea4acfacda14cfb23fc1834af7b
SHA1

3499351d3d6f4bb4ed03835229864d50230d1d65
SHA256

1fcdccb545217ee3de5ac94428eb3b0d90d4b8a0c234ec3c9ca895bc76b4e2a9
SHA512

ab56f0a46488f5291815595d568012b5d2b7cf5467a68728af3f466eca84f6a7986a0114cbd7a2620f138d4272afb95300c5e32587cddd0d69cc1b3305e3d45a
SSDEEP

768:fhjrhoahHKVxemgFxzpOd/22fZ3SNwqrj5rf+T:ftrhXFwSzpOd/22fZ3HqVq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fcdccb545217ee3de5ac94428eb3b0d90d4b8a0c234ec3c9ca895bc76b4e2a9

Files

1fcdccb545217ee3de5ac94428eb3b0d90d4b8a0c234ec3c9ca895bc76b4e2a9
.exe windows:5 windows x86 arch:x86

a6e2fcf9551da4cbb91d82ef03fbfe80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
ExitProcess
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
LoadLibraryW
UnhandledExceptionFilter
GetModuleHandleW

user32

AdjustWindowRectEx
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetMessageW
RegisterClassExW
ShowWindow

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ