1b89d026ace25cf62cdf674b8374f3b0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b89d026ace25cf62cdf674b8374f3b0
Size

67KB
MD5

1b89d026ace25cf62cdf674b8374f3b0
SHA1

29919aec255cc03ac33a56def18398abeeb82f21
SHA256

65a05f3fa72fba9fb943219bb10cf6f6921f0224628432783d41d9c3aa38e74a
SHA512

d2458a6134daea05e12af95d06b8c3c7c83ef3fd4a483b634da5fe9a283f73336851918971160e2dc12a168d21ce6227aeedf030d7c41f36ad6f82cef21f66e7
SSDEEP

1536:EiN/a58EIggwhkls+4le+BJKdaJTy8oCyPry5F3Jm7ymmBN72f4o:BN/aOShUpaTrjiWTl6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b89d026ace25cf62cdf674b8374f3b0

Files

1b89d026ace25cf62cdf674b8374f3b0
.exe windows:5 windows x86 arch:x86

1171faff3449007bf4b645b26ad24c04

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_acmdln
free
exit
strlen
_adjust_fdiv
sin
_initterm
fwrite
_exit
_except_handler3
fseek
_XcptFilter
strcmp
_onexit
__getmainargs
printf
__setusermatherr
fclose
fopen
fread
malloc
__set_app_type

kernel32

GetModuleHandleW
Sleep

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ