1b7aa7bf4ef8dcab095cdae12e15abeba2e655664e96f54839c303234383aeb5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b7aa7bf4ef8dcab095cdae12e15abeba2e655664e96f54839c303234383aeb5
Size

24KB
MD5

4e682a437f5c5d55b08cd800f476a853
SHA1

ba1e2c9081a5d866badffa229aa528316886951e
SHA256

1b7aa7bf4ef8dcab095cdae12e15abeba2e655664e96f54839c303234383aeb5
SHA512

409b111f646048dfb6a9911d4232c27e33c151a258d39baad7df66e67e3914e8b233cc487e60f1e7c587e8701555609e7548cf5ada60fa1ce17ded518d670fb3
SSDEEP

192:dtq5RvQfh9vhvo4jSLNG9hROxuOKUuLHP1oynDoV:veofhVjENihVOCv1S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b7aa7bf4ef8dcab095cdae12e15abeba2e655664e96f54839c303234383aeb5

Files

1b7aa7bf4ef8dcab095cdae12e15abeba2e655664e96f54839c303234383aeb5
.exe windows x86

b77e7030878776e3b7226088f0c9ab13

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetProcAddress
GetModuleHandleA
GetLastError
GetStartupInfoA

user32

wsprintfA
MessageBoxA

msvcrt

__getmainargs
strcpy
memset
_mbsstr
memcpy
realloc
malloc
strlen
_exit
exit
_acmdln
_XcptFilter
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp

Sections

.text
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 742B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ