01158715327576981dddafb1952190ca48a317ceef553c5fff4427043ed5c01b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

01158715327576981dddafb1952190ca48a317ceef553c5fff4427043ed5c01b
Size

45KB
MD5

354a11a75e73cbc933a6aed43bb951b1
SHA1

16f8d64035cfb2d8397cae85107320bc516ee796
SHA256

01158715327576981dddafb1952190ca48a317ceef553c5fff4427043ed5c01b
SHA512

a4db3e19eb5c9aaeed9b70c0e1e658a4bb1fd451968a5adc3f01ba611524ccf1db225047b1368bb330fbf4f3dff8bbb72bad0efe2659fa1069ae463dff0923fa
SSDEEP

768:fhjrhoahHKVxemgFxzpOd/22fZ3SNwqrj5rShj711rDq:ftrhXFwSzpOd/22fZ3HqVqjrr2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01158715327576981dddafb1952190ca48a317ceef553c5fff4427043ed5c01b

Files

01158715327576981dddafb1952190ca48a317ceef553c5fff4427043ed5c01b
.exe windows:5 windows x86 arch:x86

a6e2fcf9551da4cbb91d82ef03fbfe80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoW
ExitProcess
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
LoadLibraryW
UnhandledExceptionFilter
GetModuleHandleW

user32

AdjustWindowRectEx
CreateWindowExW
DefWindowProcW
DispatchMessageW
GetMessageW
RegisterClassExW
ShowWindow

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ