c1e8ffbf821020061b5fcbae2a4d8826 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1e8ffbf821020061b5fcbae2a4d8826
Size

21KB
MD5

c1e8ffbf821020061b5fcbae2a4d8826
SHA1

acf8ddc513e85fa6a1def204f42b3fc6727ef101
SHA256

dc91258d76d23306f7ae2349e5f4baac2fb3f7a33f15209cf675f2ab325e5c49
SHA512

fec494fbcffaf16f362617ab6e16a278b7c771affe776b9c6e760d3338880fb01252d8cdeb5147b4591b24419c19f1f81d1a38551820917da591121d80a51c10
SSDEEP

192:d2EcL+JrgunFrJ59T74hI0SNyZwR8AwfsS+Gl0K2XBHUWVcCp:AYgsrf9TEGyZPPH+/tUWVJp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1e8ffbf821020061b5fcbae2a4d8826

Files

c1e8ffbf821020061b5fcbae2a4d8826
.exe windows:4 windows x86 arch:x86

7d018a5dc1db11e641c84ccb036bf3d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
WideCharToMultiByte
GetCPInfo
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
lstrlenA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapCreate
VirtualFree
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapFree
RtlUnwind
WriteFile
GetProcAddress
HeapAlloc
VirtualAlloc
LoadLibraryA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA

shell32

SHChangeNotify

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE