1bf0b84a6e7b63c158eeef0233553c0c | Triage

Sharing

General

Target

1bf0b84a6e7b63c158eeef0233553c0c
Size

2.6MB
MD5

1bf0b84a6e7b63c158eeef0233553c0c
SHA1

ff74bee49e3f6c6691479dbd8ba0aa6706c27406
SHA256

60013ae902f32170bda4d9d467c5ab66393dd047c3bce8dab1fc4a6fdb02cc15
SHA512

2622ed3b077eb3d94214bf623df864ba4a735a9f2909149fffbdbc2d87338b8d6ef6caacd61413feb42fb3a24dbffdb6324a7dd8ead67808b50dea70912b41a9
SSDEEP

49152:i+JeRPqqaOuXaSzInVY5CU0qVooNFUcOoR3rqtydQt2I0g575M:i+gRPJaOuXQVY5C8+occO0E2QdFi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf0b84a6e7b63c158eeef0233553c0c

Files

1bf0b84a6e7b63c158eeef0233553c0c
.exe windows:4 windows x86 arch:x86

81638d02019c0bfcaaf23a9c69f2f12c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileMappingA
WaitForSingleObject
CreateProcessA
GetCommandLineA
CloseHandle
UnmapViewOfFile
WriteFile
MapViewOfFile
DeleteFileA
GetTempFileNameA
GetTempPathA
CreateFileA
GetShortPathNameA
GetModuleFileNameA

user32

wsprintfA

Sections

.text
Size: 512B - Virtual size: 510B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 533B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ