1bb1eec86e6f86fc1079c3d736ffd292 | Triage

Sharing

General

Target

1bb1eec86e6f86fc1079c3d736ffd292
Size

56KB
MD5

1bb1eec86e6f86fc1079c3d736ffd292
SHA1

cf9e05c967088c9bbf5b8845f2ef0f3478cf72e0
SHA256

21ff28047f728ab06240c54039c46529826400d19a7a6af44081664732a2863a
SHA512

2ee39165bd772dca345d77179c32d8a274484e6dc24b7a380de3865e816f90ff90714d7beb634b1caa36d2e1fad8a14d90e0f382e181c280fcb2fb12e7c8a86c
SSDEEP

1536:6TdytmznUkJTbcBPQtXCUP5rKdQz4nBxP5l+3I0wiAYW:Udy0znnbpDlsziH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb1eec86e6f86fc1079c3d736ffd292

Files

1bb1eec86e6f86fc1079c3d736ffd292
.exe windows:4 windows x86 arch:x86

87bed5a7cba00c7e1f4015f1bdae2183

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rdata
Size: - Virtual size: 72KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 48KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE