1f3fbe15eeab24512a07e65f5444ebcc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f3fbe15eeab24512a07e65f5444ebcc
Size

244KB
MD5

1f3fbe15eeab24512a07e65f5444ebcc
SHA1

93f220c925f69efa076a87cc57ce3729bf77022f
SHA256

818c70054efad1cfd3d8a149f5a4441f3e1188b91f05541f31523b9c50edaf03
SHA512

093d836abfc835cfa842bcd05abeaa5c4d1d7a78575fcd9395861c439fef40933d3da5b2800f306193159d0c9efd343eafb3b0fc13eec0dabe683b25edc6c1bb
SSDEEP

3072:JoTQGJwRzHspy2/mFP4L0c8AvFt0S0QzUWa1mhTFzvVs9aBY:ueRzQy1PsjISPC1m7zvVsQBY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f3fbe15eeab24512a07e65f5444ebcc

Files

1f3fbe15eeab24512a07e65f5444ebcc
.exe windows:5 windows x86 arch:x86

e583fdd31e39cd30fc0832ee5f30619e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawTextA
GetDlgItem
IsMenu
CopyIcon
GetScrollPos
DialogBoxParamW
AppendMenuA
GetWindowTextA

kernel32

HeapFree
GetCPInfo
GetLastError
lstrcatA
CopyFileExA
GlobalFree
GetCommandLineA
OpenFileMappingA
CreateDirectoryA
GetStdHandle
CompareStringA
FreeResource
ReadFile
lstrlenA
WriteFile
ExitProcess
GetFileType
DeleteFileW
ExitThread
FindClose

advapi32

RegEnumKeyW
RegQueryValueExW
RegEnumValueW
RegCreateKeyExW
RegLoadKeyW
RegDeleteValueA
RegQueryValueW
RegQueryValueExA

Sections

.cc31e
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dg3a3
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0c0e
Size: 206KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d58ad
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ