1b1418c21a0605318e883b4aeccbe376 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b1418c21a0605318e883b4aeccbe376
Size

17KB
MD5

1b1418c21a0605318e883b4aeccbe376
SHA1

522247f548435e5482106b3071dff4d4d6625918
SHA256

638536ac27397a329e047b26c6e0d5909485ad0a12d36406babdf78f201d1c51
SHA512

8b71bcc85e3861c07c70e438783bfb7c30e6af58a1748a23d9d7d5e91cbb744f60e361fa86a996d09e8d32aab10550b43c5f38ed65d5b90cdb44297391fb73e7
SSDEEP

384:7FMDwJ2HcmZO2Zp+Nye8pqrmub8TyztsDN:7Gw2HoKK8o8TyJc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1418c21a0605318e883b4aeccbe376

Files

1b1418c21a0605318e883b4aeccbe376
.exe windows:4 windows x86 arch:x86

1e4c0da5737da53aff5e6e0ab7de1efa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
GetModuleFileNameA
GetSystemDirectoryA
GetWindowsDirectoryA
ExitProcess
OpenMutexA
Process32First
Process32Next
Sleep
CreateToolhelp32Snapshot
CreateMutexA
CopyFileA
OpenFile
CloseHandle
FindClose
FindFirstFileA

advapi32

RegOpenKeyExA
RegCreateKeyA
RegCloseKey
RegSetValueExA

shell32

SHGetSpecialFolderPathA
ShellExecuteA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 692B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE