1dadbd5dee9c5825f87a1a94940770ff960020878a5353711f9202b5efac728f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dadbd5dee9c5825f87a1a94940770ff960020878a5353711f9202b5efac728f
Size

67KB
MD5

3f154f717675677ee1c0d8c937b81d29
SHA1

dec4c79379860967e8b9ad9cf6ad19f32b7ee31e
SHA256

1dadbd5dee9c5825f87a1a94940770ff960020878a5353711f9202b5efac728f
SHA512

ab89de6899fc811741a23f75544becbf4b751a60cb2bfe5a7dbd3c27a8c1c5cd3499a32a318c7f2a4cd8779f554672a850215898a563614ed0beb4b844896d96
SSDEEP

1536:E8crYGUh+diSNsYXN8bCtY7Hu91XOUrAmN:PvzYXN/tY2Lr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dadbd5dee9c5825f87a1a94940770ff960020878a5353711f9202b5efac728f

Files

1dadbd5dee9c5825f87a1a94940770ff960020878a5353711f9202b5efac728f
.exe windows:4 windows x86 arch:x86

dee15733e4102cd912480613ae56927f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
ExitProcess
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalLock
WriteFile
ReadFile
CloseHandle
SetFilePointer
CreateFileA
GetFileType
GetStartupInfoA
GetStdHandle
GetCommandLineA
SetUnhandledExceptionFilter
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleCursorInfo
GetConsoleScreenBufferInfo
GetNumberOfConsoleInputEvents
GetVersionExA
ReadConsoleInputA
ScrollConsoleScreenBufferA
SetConsoleCursorInfo
WriteConsoleOutputA
CreateFileA
Sleep
GetStdHandle
FreeLibrary
GetVersionExA
LoadLibraryA
GetProcAddress

user32

MessageBoxA

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 260KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ