b1c13abd566daae421d36aa82971a7312b2b17e6763a135134b369137ec0a10d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1c13abd566daae421d36aa82971a7312b2b17e6763a135134b369137ec0a10d
Size

5.9MB
MD5

62b34f29d71df9e88ba6096b8429a019
SHA1

a2fa2fdc56c4185d651509d3f202d875f4548d22
SHA256

b1c13abd566daae421d36aa82971a7312b2b17e6763a135134b369137ec0a10d
SHA512

adad6252b94ec1679343897f7e4a2d6372a2f427d7e140ebdf7fa60e77637952e22100ef534ed8f7ccb46c4f053801c33a6a6dce4e0bca8e42341cdd2131120c
SSDEEP

49152:V5kh+TsKTRW+CT4t6WtaG1gvelC+zZBXvVREEEJx5MEmuu5c/pkGtE+YzdXsU3vU:nkcPVW+CT4t6Q1LdO1kGKf0P+jEVhP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1c13abd566daae421d36aa82971a7312b2b17e6763a135134b369137ec0a10d

Files

b1c13abd566daae421d36aa82971a7312b2b17e6763a135134b369137ec0a10d
.exe windows x86

6d1830ae93d0beedb2b3d5b8c48572ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

user32

GetWindow

advapi32

RegDeleteKeyA

shell32

SHGetFolderPathW

Sections

.text
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 757KB - Virtual size: 760KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ