1f64ede91de18e29bebc2bfd6d0743b2 | Triage

Sharing

General

Target

1f64ede91de18e29bebc2bfd6d0743b2
Size

743KB
MD5

1f64ede91de18e29bebc2bfd6d0743b2
SHA1

2fc06ce1bc5587708f53df4a9b0fd39e764ed685
SHA256

e396ccaa9397fdd711b77f291ba930a0d6ca2c50028da87e064639a5da7df254
SHA512

c00236f54b16d07aa965fd6ec63aedc789139495c62f29520409477aa5835f1ee31d171da6da62f0a67a9ac8283da6f495620830ddc7772ce8ef6894364ea6f8
SSDEEP

12288:x5OG/SkoMdr2Sa5ArP7jTIDxcOozlyeIJ2hDqWiav0D2seNlNeRgGYpy861u6FZC:x/Xo4r0yzjTucBzz02FYawHeLg6/yk6i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f64ede91de18e29bebc2bfd6d0743b2

Files

1f64ede91de18e29bebc2bfd6d0743b2
.exe windows:4 windows x86 arch:x86

46ed8accdd7ceea252f976d64220b956

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetMailslotInfo
CreateMutexA
GetTickCount
GlobalFlags
InterlockedExchange
LoadLibraryW
DeleteAtom
GetLastError
OpenSemaphoreA
GetOEMCP
GetModuleHandleA
PulseEvent
CompareFileTime
VirtualProtect
lstrlenA
ExitProcess
UnmapViewOfFile
GlobalFree
GetSystemTime
CloseHandle

user32

GetWindowLongA
PostQuitMessage
GetKeyboardLayout
GetMenuStringA
DestroyMenu
GetMenu
GetSubMenu
PostMessageA
InsertMenuA
SetWindowPos
GetParent
PrintWindow
ModifyMenuA
GetTitleBarInfo
DrawFrame
TranslateMessage
DispatchMessageA
EqualRect
EnableScrollBar
InflateRect
GetScrollRange
GetDlgItem
ShowWindow
MessageBoxA
ScrollDC
UpdateWindow
DialogBoxParamA
SetPropA
LoadIconA

msacm32

acmDriverAddA
acmMetrics
acmDriverClose
acmStreamClose
acmDriverID

shell32

ShellMessageBoxA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ