1e8ff849347ff3b2af6af26c18bb7df1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e8ff849347ff3b2af6af26c18bb7df1
Size

212KB
MD5

1e8ff849347ff3b2af6af26c18bb7df1
SHA1

a33fcc5f70dcb21960abca46e89eb6799dd4a073
SHA256

8f04bde79f606b6b37e913b1e27add30a0ad599cb935d0d9635ef062dd8f8081
SHA512

1aea44e7b7ae29d988bacb716b96fed2a65ae88870fa5f4dbbbec9a42eaf0f91125cfd0293567a565c0a251c0cd9dcb33828278580bc8067f948ff49a688b396
SSDEEP

3072:MI/38csWuZwCMZ9kfuZJR+go6+n05NkxbmUVg/GXJb8Rps6T+:9MIuSrZJR+gopn6sCShm+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e8ff849347ff3b2af6af26c18bb7df1

Files

1e8ff849347ff3b2af6af26c18bb7df1
.dll windows:4 windows x86 arch:x86

e04371d2deed5fef96eec468f2602fea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

mfc42

ord825

msvcrt

tolower

user32

GetDesktopWindow

advapi32

RegEnumValueA

ws2_32

bind

shlwapi

PathIsDirectoryA

ole32

CoCreateInstance

oleaut32

SysAllocString

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

netapi32

Netbios

Exports

Exports

Dispatch
InputFile
PrintFile

Sections

.text
Size: 184KB - Virtual size: 344KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE