d051f12db48a70e3bb11670d971c19a245dd9221a2630a5af818a8db92218702 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d051f12db48a70e3bb11670d971c19a245dd9221a2630a5af818a8db92218702
Size

1.1MB
MD5

754f602f51b8ca961a8f715ba915747b
SHA1

b45113bd8e9047201a04a256f38d11475a8eebd6
SHA256

d051f12db48a70e3bb11670d971c19a245dd9221a2630a5af818a8db92218702
SHA512

e5134a0724caa239729c940ec45d06beb93610d7d3ccdc5934d6814a7604f929607023c1c4afafc15a839e525cfa53741b63f4a93ec916cc50bee90abb662eba
SSDEEP

24576:VbiBklPSSnTURt0VtQtIyXy9JjAKA26XMVYer6zBZXk:UmAz0PQtgjAt2SjeoBt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d051f12db48a70e3bb11670d971c19a245dd9221a2630a5af818a8db92218702

Files

d051f12db48a70e3bb11670d971c19a245dd9221a2630a5af818a8db92218702
.exe windows:5 windows x86 arch:x86

e8910e92a5e50e6919c99830a61cfd03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

IsChild

advapi32

CheckTokenMembership

Sections

Size: - Virtual size: 1008KB

IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 93KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE