1b1b70e00ce2e8d0bcb54a66ddf3d4e6 | Triage

Sharing

General

Target

1b1b70e00ce2e8d0bcb54a66ddf3d4e6
Size

3.2MB
MD5

1b1b70e00ce2e8d0bcb54a66ddf3d4e6
SHA1

43bd2fda5a103f6123e59034f92891c8615d4a17
SHA256

13897134d44f811e575e4111ebe5ce3f73cefffaedafa4c0bb6b6916ff86d61e
SHA512

a081d385e4ecdde5bb933193663f91f227e303166a83e07eb8c6ed4bb51ddb8dfc4f1ec4c49679a5226572986957f7d9399663b6292a70f0a6ca69b7f41399f9
SSDEEP

49152:bCZF6uPiRpurkNy9HPCcLjx+BxdEQhsBH6WPTnfBNQ0wqjJdLcs5kSOTX7iGY6:uZFZPTrPC86dEvPNxwIJZf+7iGL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1b70e00ce2e8d0bcb54a66ddf3d4e6

Files

1b1b70e00ce2e8d0bcb54a66ddf3d4e6
.exe windows:5 windows x86 arch:x86

4e7a51f651e8fb870a7d4faf2b9558b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetVersionExW
FindResourceW
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess

user32

SetWindowTextW

Sections

.text
Size: - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc0
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc1
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ