1b01535ce052861c30df0ad33a137fcf | Triage

Sharing

General

Target

1b01535ce052861c30df0ad33a137fcf
Size

82KB
MD5

1b01535ce052861c30df0ad33a137fcf
SHA1

854a744e62f80537b1f137bb819b4f9fa44bd88f
SHA256

22e40f5ed1f690eb2527a76d65f7afb1e64690d22776c734ceb29cf53cb58dcb
SHA512

5f381d2f360bed2fd1cc522c30c6adcfb510fe1fe989e1385489c8e145c7f44e4ec28b1f916deeb32aba3f9a94fd290f74f65cf140bb658d1207b611f0f6cc45
SSDEEP

1536:PaHLtZfHy0O/JuSkZWeGkqbT3ckFqtLUNCdbbEToYJOWYlppiu0C5hbs:PaHzHY/JBOQksAkItZnETHOrlplhA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b01535ce052861c30df0ad33a137fcf

Files

1b01535ce052861c30df0ad33a137fcf
.exe windows:4 windows x86 arch:x86

744db3ce8dcb8240f752e575916d499f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetLocalTime
GetWindowsDirectoryA
GetModuleHandleA
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualAlloc
VirtualQuery
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
HeapValidate
ExitProcess
RtlUnwind
GetFileType
GetStdHandle
GetCurrentProcess
DuplicateHandle
SetHandleCount
GetCommandLineA
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetConsoleCtrlHandler

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ