f1d9e7c50cee034b22ff6bfc0bab670d85289cc28427933b8835f2d24fa345dc | Triage

Sharing

General

Target

f1d9e7c50cee034b22ff6bfc0bab670d85289cc28427933b8835f2d24fa345dc
Size

24KB
MD5

2f872a6506bfd0121dc687e5db3ceca6
SHA1

7e21f24ae8353e2dd6ed70c231698502762dede4
SHA256

f1d9e7c50cee034b22ff6bfc0bab670d85289cc28427933b8835f2d24fa345dc
SHA512

45201fd536048dc75fa1a7552c1b9788c0adf85fff67edb8df23333a1e7cd2d8ecce80f2668e58eb35fd4e3beec041340acc83389810dd56752b49946496c725
SSDEEP

96:cIsCyJb1ECVyGrMxPsdoN2OS3/42OK32F3C:cnCyJbyCopu8/KL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f1d9e7c50cee034b22ff6bfc0bab670d85289cc28427933b8835f2d24fa345dc

Files

f1d9e7c50cee034b22ff6bfc0bab670d85289cc28427933b8835f2d24fa345dc
.dll windows:4 windows x86 arch:x86

1d8e94841ee55bba4216eb19a6871af0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcAddress
GetLastError
LoadLibraryA
DisableThreadLibraryCalls

msvcrt

fprintf
free
malloc
getenv
abort
_initterm
_adjust_fdiv
_iob

Exports

Exports

jsig_handler
jsig_primary_signal
signal

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 791B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 76B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 232B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ