1fcf711f0c8edf8516dfa180b59fdad6a9b9a769d0fd8579e57ae79bc26e797c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fcf711f0c8edf8516dfa180b59fdad6a9b9a769d0fd8579e57ae79bc26e797c
Size

63KB
MD5

54a486e402de732573034042496e055b
SHA1

461d15b3955fabd01932e0279891968efc25c6dd
SHA256

1fcf711f0c8edf8516dfa180b59fdad6a9b9a769d0fd8579e57ae79bc26e797c
SHA512

a1cce0a6c258fdf3712cf76a95b5b6d53302a27628b5f2758edf8413002cb6aba2d54c816afb66760369d6b1ae3b3a11ad9bf7847d681afa21f7a075b8cd63f3
SSDEEP

1536:K+TWkfCLT/8EFMGAd/fEcCVlPsfBNq+e0J8v16reocx5jRVTV:jTM/8EFzAqcgtLD0JDtg7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fcf711f0c8edf8516dfa180b59fdad6a9b9a769d0fd8579e57ae79bc26e797c

Files

1fcf711f0c8edf8516dfa180b59fdad6a9b9a769d0fd8579e57ae79bc26e797c
.exe windows:4 windows x86 arch:x86

9e93118de3bcae3ef9c1958073dd7169

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SwitchToThread
EnumSystemLocalesW
RtlZeroMemory
LoadResource
SetConsoleMenuClose
IsNLSDefinedString
OpenState
GetCurrentApplicationUserModelId
ExpandEnvironmentStringsW
GetNamedPipeClientSessionId

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 49KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE