1dfa5d28c3aaeb7e4d1f46a5fdbad66fcea8ee76399ff9cf7f6c54805fab77a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dfa5d28c3aaeb7e4d1f46a5fdbad66fcea8ee76399ff9cf7f6c54805fab77a5
Size

119KB
MD5

54593a4cfedfc76c1c036e4a7f8fbdf0
SHA1

51b1e21dc4ad60d306db2e29e628020ca8465bfe
SHA256

1dfa5d28c3aaeb7e4d1f46a5fdbad66fcea8ee76399ff9cf7f6c54805fab77a5
SHA512

731249e9fe7e716d53495393fb47c169c0adfe9ba4a4f6a91252f7471e2baa2f2c27352daae3fc3cf73c1364d6aca68b9ebd4a792f07b542322662d058d04ee9
SSDEEP

3072:4/6mrnDFHNojxwbSo5J7NgyW/Sm+lHh4R6h0qfZwpFCxb9vqzI:Jmbhr2N/KHPh0qMFCxb9ys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dfa5d28c3aaeb7e4d1f46a5fdbad66fcea8ee76399ff9cf7f6c54805fab77a5

Files

1dfa5d28c3aaeb7e4d1f46a5fdbad66fcea8ee76399ff9cf7f6c54805fab77a5
.exe windows:4 windows x86 arch:x86

644589f9100b4b08aa54b617b95b346e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleWindow
GetEnvironmentVariableA
ReadConsoleA
FindFirstStreamTransactedW
CreatePrivateNamespaceA
SetProtectedPolicy
ReadConsoleOutputW
WritePrivateProfileStructA
SetThreadPreferredUILanguages

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE