1880b30ef4ccf16ccf1a2ae673ae52d6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1880b30ef4ccf16ccf1a2ae673ae52d6
Size

102KB
MD5

1880b30ef4ccf16ccf1a2ae673ae52d6
SHA1

72cd3913561a853938aa3dfd16ea959641fdcbdc
SHA256

e558de7938d1a3fa52bf934faeabbd6b7c97bf2058b5adcba594afc3d0bfac18
SHA512

f60985d4268d456aaef9ab826a9b25b473783a0db8685f473598e05d05a3ee6fca042ea8ec5e718291abc770c1f511b82e45b3f4f6f90e53f6bffe7e03e5c673
SSDEEP

768:uIqC5Iotj5zPNnGldKYe3sxDOcsxW9IF+Z22jOO7QvBsOUxp:8z+j5juMIJQvqOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1880b30ef4ccf16ccf1a2ae673ae52d6

Files

1880b30ef4ccf16ccf1a2ae673ae52d6
.exe windows:4 windows x86 arch:x86

2bed3b575b122ce7042753fe75b3b7d0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FormatMessageA
GetLastError
SetLastError
VirtualAlloc
CloseHandle
MapViewOfFile
CreateFileMappingA
VirtualFree
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
SetEnvironmentVariableW
SetEnvironmentVariableA
WideCharToMultiByte
UnmapViewOfFile
lstrcpynW
GetFullPathNameW
GetFullPathNameA
HeapAlloc
GetProcessHeap
GetFileSize
ReadFile
SetFilePointer
CreateFileW
GetEnvironmentVariableW
CreateFileA
GetEnvironmentVariableA
GetVersion

user32

MessageBoxA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 93KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE