1ac2a529fb7e28f155c3b95fecbdbc82 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ac2a529fb7e28f155c3b95fecbdbc82
Size

676KB
MD5

1ac2a529fb7e28f155c3b95fecbdbc82
SHA1

2a056f8d9a9dd1bfb423c301a3889d35aac6b70f
SHA256

8f79915bc8ceb0af150c3db5a26e3294d569fb30644bec9de661eb5b8a1398bd
SHA512

212bdca008df0296b89f71ab57e64761632a3a134122d34d34f98cbbb2560bf85beae74340e465c63c8d1ae9fe281f09795e46a050b05dc272d6bbdf4909c382
SSDEEP

12288:afNuxQXWXvub0Fdaf9Pfchv9J49IuQPqeWK7WjmYHEJcAZ3yDDXTMuWJ+XIaQV3z:ewXjdYVfchFJ4OVqeWcWiYHc+DXQEIa4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ac2a529fb7e28f155c3b95fecbdbc82

Files

1ac2a529fb7e28f155c3b95fecbdbc82
.exe windows:5 windows x86 arch:x86

78c5182962cee8ca85401ca6b576882b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalSize
GetCommandLineW
VirtualProtectEx
GlobalHandle
GlobalAlloc
GlobalFlags
GlobalFix

user32

DrawEdge
CheckMenuRadioItem

Exports

Exports

OpenMbdyucr
Npfgtbd

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 663KB - Virtual size: 668KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ