c1209927019faa76e01d0af4652649a6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1209927019faa76e01d0af4652649a6
Size

2.9MB
MD5

c1209927019faa76e01d0af4652649a6
SHA1

1a48cb4cf9a9b12a508ac118abd78a4b56da1c64
SHA256

bcb8ea35b8ecafad9cf849f1afac394a2aa1ffd27b5de9f62de407d98d2e18f8
SHA512

d85b426fd7f5338d20f1ccc2550ef1a2ea7899f57bf94777fb73c4a61bb4eb3eb2a2df1ee075dad115c279e99f8212ba325f749476429bd2a45e1379872199b4
SSDEEP

49152:ySq1e2MrDWevMRsKM0iwbGNwy73RHNm0HigpeaEvPPdMekIfHMjzijyoMlgIg2K:ySgWDfkmL0iNNwyBNLPwa4HddkIfs/6w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1209927019faa76e01d0af4652649a6

Files

c1209927019faa76e01d0af4652649a6
.exe windows:5 windows x86 arch:x86

baa93d47220682c04d92f7797d9224ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy

comctl32

InitCommonControls

Sections

Size: 512B - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1005KB - Virtual size: 1004KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

xvbrdsou
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

byiznsfz
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE