a1954d1ecd59cbaf97b8e43df088043495582a8e42be7f62124e63b4495f2a7a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1954d1ecd59cbaf97b8e43df088043495582a8e42be7f62124e63b4495f2a7a
Size

73KB
MD5

97323ad4a9ba28bf5cfa11443590941f
SHA1

25d6125bcc361cede4a450527d614974880acaa7
SHA256

a1954d1ecd59cbaf97b8e43df088043495582a8e42be7f62124e63b4495f2a7a
SHA512

8f88c09ad834f4e1e2da0dc570d873017b4aa6ef1fc9a36c358bd5153d702f82624ba0ffacc861ba6be05631df1213029336db29207abb06ab2bb4d8a530ac44
SSDEEP

1536:x0MoWELkdEwt74R6QJro0857l+bMxNs2QWCFu6sDU2:aMoWKkdEi74RLo0uaumjuA2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1954d1ecd59cbaf97b8e43df088043495582a8e42be7f62124e63b4495f2a7a

Files

a1954d1ecd59cbaf97b8e43df088043495582a8e42be7f62124e63b4495f2a7a
.exe windows:4 windows x86 arch:x86

0c144496adf6d6951a8195019d714846

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetModuleFileNameA
GetProcessHeap
HeapAlloc
ReadFile
SetFileAttributesA
SetFilePointer
WriteFile

Sections

.text
Size: 1024B - Virtual size: 792B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE