1f5605e87622d5c7a9dcd2d6d53f4658 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f5605e87622d5c7a9dcd2d6d53f4658
Size

90KB
MD5

1f5605e87622d5c7a9dcd2d6d53f4658
SHA1

3554e46f2775649f91837f05d237f2d69d49bdeb
SHA256

86363e6ee3521f4ed6e494db47220ad343bb3431e908e2c06c95a62b00016793
SHA512

3c62e25d4e8f8e2b9cedf2d7be02d182193ab3e466b33b9b9421a4651cf979caecdc7cdaa7790302dd9b3cce0f55c42892529ac4e7e61f36dfd065a1ac9748a4
SSDEEP

1536:BRzjZmEnutefUwUuoZzUl+JVuJV3p917/:/ZmgFUjjhUlMVuJV3p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f5605e87622d5c7a9dcd2d6d53f4658

Files

1f5605e87622d5c7a9dcd2d6d53f4658
.exe windows:5 windows x86 arch:x86

cde20c5bd58aae3829ec588dbaeb5360

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIconEx
GetWindowTextLengthA
CopyImage

advapi32

RegOpenKeyA
RegCreateKeyW
RegDeleteKeyW
RegGetKeySecurity
RegQueryInfoKeyA

kernel32

CopyFileA
GetFileType
ExitProcess
HeapAlloc
ExitThread
GetCPInfo
GetPriorityClass
FlushFileBuffers
HeapFree
WriteFile
GetLocalTime
OpenFile
GetStdHandle
GetLastError
FormatMessageA
FreeResource
lstrcmpA
DeleteFileA
lstrcatA
CompareStringA

Sections

.eecd
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.7h1d
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.0f17
Size: 43KB - Virtual size: 403KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.g2h5
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hba03
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ