c1ac7ab9f1744767859aa42ddd67cb78 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1ac7ab9f1744767859aa42ddd67cb78
Size

2KB
MD5

c1ac7ab9f1744767859aa42ddd67cb78
SHA1

cc1dbcdb25b4274101e9a5995b1237b5fcfb80e9
SHA256

f9253dd520eaed0c084ee3caa7026583410c412e66baf781a04f2ecf767fb72c
SHA512

304d933e27e8981e41b3f2a4b7f4bb87c27c624b2ed8703d5c6f7ea4f7165223279c85b096edadbd5f10965491b8a9bffd3f28601254c523a2f800540bfbe8b7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1ac7ab9f1744767859aa42ddd67cb78

Files

c1ac7ab9f1744767859aa42ddd67cb78
.exe windows:4 windows x86 arch:x86

8c5d61d41f576abe3ca4cadbd30734c1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
LoadLibraryA
CloseHandle
WriteProcessMemory
VirtualAllocEx
GetModuleHandleA
OpenProcess
Sleep
WinExec
GetWindowsDirectoryA
VirtualProtectEx
GetCurrentProcess

user32

FindWindowA
GetWindowThreadProcessId

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ