1cb4080dd740fce335fbf85618ef762a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cb4080dd740fce335fbf85618ef762a
Size

40KB
MD5

1cb4080dd740fce335fbf85618ef762a
SHA1

20caccf31ba006aacf4e51f403b4c942cf025248
SHA256

dc56c99b526a1c288dc53ac34acedde5f525ea3b56f197ab1da1d03d1e0cb884
SHA512

85b3d6469c2d58c745a48f6db40f65eb271a67431504d7abc50670803728702731f00eff58bfc782f82c5a0a1f5da0d68a47c71052583739a792ccc3244e4dd1
SSDEEP

768:nLfFRvmzROAYLZWcBT5c0HnTDKbI6J+S+j4wHlAsFHLMPcLTxuOHYu207RQ3pMcI:7FVNnTDd6kS+j4wHlDr6ckOHH2v5McNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cb4080dd740fce335fbf85618ef762a

Files

1cb4080dd740fce335fbf85618ef762a
.exe windows:4 windows x86 arch:x86

ae0a5112fe1176f4e5f6e1bc95e4c209

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

FreeLibrary
lstrcatA
GetModuleFileNameA
ExitProcess
LoadLibraryA
GetProcAddress
lstrlenA

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 1024B - Virtual size: 556B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 404B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ