1e94dc4c81a3ecf21c860aaa3b138b64cf86c70506185a14ea70388d91aacffb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e94dc4c81a3ecf21c860aaa3b138b64cf86c70506185a14ea70388d91aacffb
Size

62KB
MD5

49aa2b18c08c3afd3be5787418f64372
SHA1

ca07c6cebe1ea4adc4b9d8421805a0358b0bb9c7
SHA256

1e94dc4c81a3ecf21c860aaa3b138b64cf86c70506185a14ea70388d91aacffb
SHA512

ce3aa45df774b6c493dba57756b2abbb8eb6e54d17c413b045e4e225a5ccad55fc152b0fc4acb3b6b4daeab4a6509efdd56d4ed3a196e4ae62494188f761c018
SSDEEP

1536:/Cs5D10O7NYSw51v51gprF7e9sjtxHvhO+Hf4TRq+SzF8:/TphkbOrFusjtBg+EpSZ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e94dc4c81a3ecf21c860aaa3b138b64cf86c70506185a14ea70388d91aacffb

Files

1e94dc4c81a3ecf21c860aaa3b138b64cf86c70506185a14ea70388d91aacffb
.exe windows:4 windows x86 arch:x86

6ec51b4e0c7c5e97f68ed4509f92dd9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleCursorPosition
UpdateResourceA
ReadConsoleOutputAttribute
CreateNamedPipeW
GetLongPathNameW
LockResource
FindActCtxSectionStringW
CreateDirectoryExW
GetConsoleCommandHistoryA
InterlockedIncrement

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 47KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE