e1677ec35a37b33cb7488d5d8511d1fd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1677ec35a37b33cb7488d5d8511d1fd
Size

30KB
MD5

e1677ec35a37b33cb7488d5d8511d1fd
SHA1

9104a0690eec943618c57ff05aa8b761fc5144c1
SHA256

617bac77b8122c3f7b4b92211f37ec1a746e7cb6850873300cd4b384c7cc6ffb
SHA512

ce6a3d0427af04100506311c62d15ac25d6b19debbe377027fef97523f44d3d323e9497eb3ba2fc32c43fbb3659943dfb12cef490e4fb08853047efbd2236853
SSDEEP

768:rKZ/BVw1vR7IVrzeW+fOAfujKpkGwbdQvIG:rg45NI16WTAfN+GwbWv3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1677ec35a37b33cb7488d5d8511d1fd

Files

e1677ec35a37b33cb7488d5d8511d1fd
.exe windows:4 windows x86 arch:x86

817f2141e1833cb58ee74046eba85d22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessWorkingSetSize
GetCommModemStatus
IsBadCodePtr
GetTapePosition
GlobalFix
GetBinaryTypeA
lstrcmp
lstrlenA
CreateIoCompletionPort
GetNamedPipeHandleStateA
GetCommMask
CreateIoCompletionPort
GetConsoleDisplayMode
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

text
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: 22KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ