a1fedda91b4d6a88c6a87f4eb8d4497bd0a04c29d96be4e664f2ad63f6f41fc8 | Triage

Sharing

General

Target

a1fedda91b4d6a88c6a87f4eb8d4497bd0a04c29d96be4e664f2ad63f6f41fc8
Size

54KB
MD5

f92fd3b99ee4a51bc541740f3f76aea6
SHA1

9fdc0704e225760c6635dd820862531e0e9240b2
SHA256

a1fedda91b4d6a88c6a87f4eb8d4497bd0a04c29d96be4e664f2ad63f6f41fc8
SHA512

cb6098ae3e2b969eeda66a46dd6f3949c22d86cf658b5d394d4949edf89c64cd536635c011169176b71990f297796eef29683bf069bf4e11d97e76a48d4ca527
SSDEEP

1536:17TJopblB4dqyyUiZ06pX3I6/qxiSEGNJFV:17TQlatyYePxiFV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1fedda91b4d6a88c6a87f4eb8d4497bd0a04c29d96be4e664f2ad63f6f41fc8

Files

a1fedda91b4d6a88c6a87f4eb8d4497bd0a04c29d96be4e664f2ad63f6f41fc8
.exe windows:4 windows x86 arch:x86

09d0478591d4f788cb3e5ea416c25237

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 39KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE