e1ea2f1a07d80a918dd23d92ce3d70e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1ea2f1a07d80a918dd23d92ce3d70e1
Size

60KB
MD5

e1ea2f1a07d80a918dd23d92ce3d70e1
SHA1

80e720a5cf9c00f375e3de51b1f572c2ec9e16c4
SHA256

79eb371cdbd610386e64c9ecb51fb6095acd48cc1a487a7383c233205c26a309
SHA512

890ebb442a9d231536c259f26083230ea775595521f26837c479235e7f7420eafbe84c10479235003ae92aa5dd938d15227348d03efc4ce51964bcd02f17cac4
SSDEEP

1536:p4QIRi5p3apZusKt88oNK4+AFkZ7ziTdM:p4QIkp3apZUtGp+AFkZ7zmM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1ea2f1a07d80a918dd23d92ce3d70e1

Files

e1ea2f1a07d80a918dd23d92ce3d70e1
.exe windows:5 windows x86 arch:x86

0ac7e833a271fa032926975e9373ddee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ActivateActCtx
SetThreadContext
ZombifyActCtx
GlobalFindAtomW
TerminateThread
GlobalAddAtomA
FindVolumeClose
GetLastError

advapi32

CryptSetHashParam
CryptEnumProviderTypesW

crypt32

CertEnumPhysicalStore

gdi32

SetBkColor
EnumObjects
SetTextCharacterExtra
SetLayout
GetPaletteEntries
CreatePolyPolygonRgn

actxprxy

GetProxyDllInfo

Sections

.text
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hxtzpv
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 705B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 924B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ