1f55c1a4b461b6b62db96a59a477383d14d8f271159c98cba5e65261cd318454N | Triage

Sharing

General

Target

1f55c1a4b461b6b62db96a59a477383d14d8f271159c98cba5e65261cd318454N
Size

194KB
MD5

efacaaaf382f9178a9fa78ea5adce260
SHA1

5f3c32520582062e92cf0fcc92490b54304d6d87
SHA256

1f55c1a4b461b6b62db96a59a477383d14d8f271159c98cba5e65261cd318454
SHA512

c840e1bd97fed184f4653e85ec919121ca351bf60666024e229cc5f14540fd60ef72ffc503b7e67bae799a31dd6c946c879bfd2bfa9afce07c63cabb3ef13328
SSDEEP

3072:MaBK6IBhRlOopOwXZbdRv4MpGeHz8nfr0dvSSavnSHhDarnGFzot5h4Q4:Ma/Ahn59T8fGvKvnSHUqxot5/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f55c1a4b461b6b62db96a59a477383d14d8f271159c98cba5e65261cd318454N

Files

1f55c1a4b461b6b62db96a59a477383d14d8f271159c98cba5e65261cd318454N
.exe windows:4 windows x86 arch:x86

fbd63f6f7c53bc58456ab50300fb29f8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
SetProcessPriorityBoost
CreateProcessW
DeleteCriticalSection
TerminateThread
Sleep
CreateFileW
EnumResourceTypesA
GetModuleFileNameW
WriteFile
InterlockedDecrement
ReadFile
GetVersionExW
GlobalAlloc
GlobalLock
GlobalUnlock

imm32

ImmAssociateContext

ole32

GetHGlobalFromILockBytes
CoTaskMemFree
StringFromGUID2

Sections

.text
Size: 119KB - Virtual size: 119KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 652B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ