1528691bb649c15537c3a201d49f335291bfd0adcda81a21f7bd8a7ec5ddc5a7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1528691bb649c15537c3a201d49f335291bfd0adcda81a21f7bd8a7ec5ddc5a7
Size

48KB
MD5

5fcf52e4cc1d9b9564cc37cc33cf0eb5
SHA1

eec089ef0b4d41efe8efbf5592200df675689735
SHA256

1528691bb649c15537c3a201d49f335291bfd0adcda81a21f7bd8a7ec5ddc5a7
SHA512

41a6f59549b157a4bd845b7aa3bb759b8053b0590e52be389fde6591dc7357e3f8248f45635da15a6e180bad414194f8bc9fa64b698a5e7256f7249c57ff2ae0
SSDEEP

768:Erz7BIt4BwwM9VLyD8oaPyI11kehWY9nmSFLSTkUtGQGkBt3H7KCKyVOT3:ETqt4U9lyD8P/keM/SFLgkIh13mWVOT3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1528691bb649c15537c3a201d49f335291bfd0adcda81a21f7bd8a7ec5ddc5a7

Files

1528691bb649c15537c3a201d49f335291bfd0adcda81a21f7bd8a7ec5ddc5a7
.exe windows:4 windows x86 arch:x86

e95e3c19c1b1846eddfe9b97188d572c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
CreateProcessW
DeleteFileA
ExitProcess
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
GetStartupInfoA
GetStartupInfoW
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

ntdll

NtFlushInstructionCache
NtOpenKey
NtProtectVirtualMemory

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE