1eb70952821e3f61a93446ce9554c55fff321d1d3de79f6f38f0f05109edee74 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb70952821e3f61a93446ce9554c55fff321d1d3de79f6f38f0f05109edee74
Size

71KB
MD5

f17564246865b10e8a28f51d034b2e85
SHA1

73205715b90fcdbaee331e570c64a06b1a24159e
SHA256

1eb70952821e3f61a93446ce9554c55fff321d1d3de79f6f38f0f05109edee74
SHA512

8a83a6dd44c5ceea55b39335b2b9b30a0d5e0d56290ab4a78c2cb40c04a6a9ed431dd084cc473073055f0d58eb120d71b2aaf58fcdc5c13c2ff69270692710c0
SSDEEP

1536:xDYhx+IO3q0g2kF9OAKebWFP0c9snwPueKt4a5P4V2YI:Ix4bIEeCFPunwPLa5P4V2h

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb70952821e3f61a93446ce9554c55fff321d1d3de79f6f38f0f05109edee74

Files

1eb70952821e3f61a93446ce9554c55fff321d1d3de79f6f38f0f05109edee74
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE