e1e86d90cd5a1dea8fc74592c154199b1dd79cc54d91b4fbb893eec978c1d842 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1e86d90cd5a1dea8fc74592c154199b1dd79cc54d91b4fbb893eec978c1d842
Size

1.5MB
MD5

734ca64be2400c4daeac921a9c1cc210
SHA1

eacd8db3e6df24d52a51ee57d73cb869c84460da
SHA256

e1e86d90cd5a1dea8fc74592c154199b1dd79cc54d91b4fbb893eec978c1d842
SHA512

e8454bba3217580dc1bf3b94c8e52a5796124fc1737e4c56553219d4feda6de5f069850d558a94e353036210bcdc7bdd07aa5b34cf0704294a9e3a5c743bec58
SSDEEP

49152:JWTIGMpQ538T/qd8Ue/aZfoeumIjwDoyW4Y:sWpS38T/452QqwDoyW4Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1e86d90cd5a1dea8fc74592c154199b1dd79cc54d91b4fbb893eec978c1d842

Files

e1e86d90cd5a1dea8fc74592c154199b1dd79cc54d91b4fbb893eec978c1d842
.exe windows:4 windows x86 arch:x86

935bd9db9c8d369c003190aeb7af980a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

sndPlaySoundA

mfc42

ord5606

msvcrt

_ftol

kernel32

lstrcmpA

user32

RegisterClassA

gdi32

GetTextExtentPoint32A

advapi32

RegQueryValueA

shell32

ShellExecuteA

comctl32

ImageList_GetIconSize

msvcp60

??0_Lockit@std@@QAE@XZ

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Exports

Exports

Loader

Sections

.text
Size: 352KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.32
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.32
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ