1b6776b32e4458af0be65634bbd52c6c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b6776b32e4458af0be65634bbd52c6c
Size

128KB
MD5

1b6776b32e4458af0be65634bbd52c6c
SHA1

843707ab1c7189889efbbec252ffd85710630924
SHA256

3d9349da78a3e9db587e3c359a8d6602e9714d07d1fcfafef83f666ccbb2688a
SHA512

9685c6991c0f00fdddce3f2fb0ec7bcb22c0aaa2ab32974a1a32d80a8fe61dd29ed8c749aaf9ac987172602905a5d0d588ca5f05fadeb250d5d8d173f28b22e0
SSDEEP

3072:7jxJJjn/OhZgjF/LNyy6uSkJ3mFQw5UbH/LNyy6uS:7dJJifAFDNyy6uSU3mgHDNyy6uS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b6776b32e4458af0be65634bbd52c6c

Files

1b6776b32e4458af0be65634bbd52c6c
.exe windows:1 windows x86 arch:x86

9c0050334da711b5147027326c52827d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetFileSize
GetModuleHandleA
CloseHandle
GetTickCount
GetWindowsDirectoryA
CopyFileA
LocalAlloc
LocalFree
CreateFileA
ReadFile
RtlUnwind
WinExec
WriteFile
DeleteFileA

user32

MessageBoxA

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueExA

crtdll

__GetMainArgs
exit
memcpy
memset
printf
raise
signal
strcat
strchr
strlen
strncpy

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 1024B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ieoo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ