01cf4296ac39caa2ab14107d39ad813d2364eb080e9e83636ac0c70fc0788e17 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01cf4296ac39caa2ab14107d39ad813d2364eb080e9e83636ac0c70fc0788e17
Size

72KB
MD5

d446ab4ac08098bbf03fef94901fa3c5
SHA1

cba3107a60d309f8ef3d2e7553afc88eba732e11
SHA256

01cf4296ac39caa2ab14107d39ad813d2364eb080e9e83636ac0c70fc0788e17
SHA512

f18e377ad479d244bfdfad4dd174afce6ed4e71c29ffbb00df42450317741fbb3cb5deaa9a049409d6e56667a222d75743abd4bb3b03b9bc872406a87ceb82dc
SSDEEP

1536:x+Yh85gHOEutUKZKEHfmWqk0AEPGER3ZabH:fh3HOEuaWKE+/RA87RuH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01cf4296ac39caa2ab14107d39ad813d2364eb080e9e83636ac0c70fc0788e17

Files

01cf4296ac39caa2ab14107d39ad813d2364eb080e9e83636ac0c70fc0788e17
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE