1a197e818e447218398b97fe87599e36160fb4238a43136625e68c4384e9b63b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a197e818e447218398b97fe87599e36160fb4238a43136625e68c4384e9b63b
Size

21KB
MD5

70e92e94f4219003876926ad60946a06
SHA1

eb01e3948f356b962eaefec21fa25b868cdeed81
SHA256

1a197e818e447218398b97fe87599e36160fb4238a43136625e68c4384e9b63b
SHA512

b468fbd3f66484a0476d002a325b21d037c88ae5ab8f9d7ba1251ac8d33a32d1606ab4124c91256e8d533e781102c882294e86c5294d12901d2f2c01f3697cc0
SSDEEP

384:LkDozDI/RndTVSRk/zotqd1bQ6tL4H1ntqFl+tZqPdRTw:XA/REqIa+6BMgv+YRs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a197e818e447218398b97fe87599e36160fb4238a43136625e68c4384e9b63b

Files

1a197e818e447218398b97fe87599e36160fb4238a43136625e68c4384e9b63b
.exe windows:4 windows x86 arch:x86

bd2d0fb6652da7d0284fd7bf88229c4c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DeferWindowPos
DestroyIcon
CreatePopupMenu
DestroyAcceleratorTable
UpdateWindow
ShowWindow
PostQuitMessage
DefWindowProcW
SendMessageW
LoadIconW
LoadCursorW
DispatchMessageW
GetMessageW
CreateWindowExW
RegisterClassExW
DestroyCursor
PostMessageW
DestroyCaret
CreateMenu

kernel32

GetModuleHandleA
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapFree

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE