1e6e1ad74a2217a0cdff06eddafc295cd3bdac498491b50dee4d13859ccaddc1 | Triage

Sharing

General

Target

1e6e1ad74a2217a0cdff06eddafc295cd3bdac498491b50dee4d13859ccaddc1
Size

119KB
MD5

d94790a20664e7bbee4e34aa912caf44
SHA1

c682a0fff80b75b8a7a8e71017a0d8f470721506
SHA256

1e6e1ad74a2217a0cdff06eddafc295cd3bdac498491b50dee4d13859ccaddc1
SHA512

844147f074584843de26564b0d7f39eaaa701924752c47abc387db4cb3d90f9d7fb6ddcd60eee5d4e18c93f36eefb53a9909a4c50de6bef565312f7c8a59db9e
SSDEEP

3072:GA1sAGiLedRdR4PjU1UeVsCjzd2dAL02E7oy:GCGiC4Xbqdt0l7oy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e6e1ad74a2217a0cdff06eddafc295cd3bdac498491b50dee4d13859ccaddc1

Files

1e6e1ad74a2217a0cdff06eddafc295cd3bdac498491b50dee4d13859ccaddc1
.exe windows:4 windows x86 arch:x86

9a6b2ce62af29c5d54168317fb30f1b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDrives
FillConsoleOutputCharacterA
Process32First
ReadConsoleInputW
WaitNamedPipeA
GetCalendarMonthsInYear
GetModuleFileNameW
GetComputerNameW
RemoveDirectoryTransactedA
InitializeConditionVariable

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 105KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE