1bfce86a773f8c7568c8b9fa0b80d3c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bfce86a773f8c7568c8b9fa0b80d3c5
Size

168KB
MD5

1bfce86a773f8c7568c8b9fa0b80d3c5
SHA1

6d1ad3d1ba5108cd0a6933b23935c56c91d9b7cb
SHA256

d481d644be576c6f278ea7043b054c7c802f8ca2ba25aac43fa3e26b6d948c02
SHA512

310dbc9122e7574aab2fed20785bb418b77ddaa257320f73f1587a47a19ac61c653f59a8f0caf6e7d43cdb587c3691fc183568d20e21509477f81b7b24b1afa4
SSDEEP

3072:J6xH6Ek59bdJDU+qp7Q/ryNRoXIIqd9GHhBBsUIId4X:JKLk59hJI+qZuyN0qU6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bfce86a773f8c7568c8b9fa0b80d3c5

Files

1bfce86a773f8c7568c8b9fa0b80d3c5
.exe windows:5 windows x86 arch:x86

a9249fdd932f8e577522fe6bcd395977

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDlgItem
DrawTextW
DrawIcon
AlignRects
CloseWindow
GetCursor
GetWindowTextA
CopyImage
DialogBoxParamA

kernel32

GetPriorityClass
ExitProcess

advapi32

RegCreateKeyA
RegCreateKeyExW
RegQueryValueExW
RegLoadKeyW
RegEnumKeyA
RegEnumValueW
RegOpenKeyExA
RegQueryValueA

Sections

.ebopc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dpop
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fmleb
Size: 127KB - Virtual size: 498KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nefha
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ