1c818b68321d26bfabf7b95df4820ec0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1c818b68321d26bfabf7b95df4820ec0
Size

812KB
MD5

1c818b68321d26bfabf7b95df4820ec0
SHA1

1dd0cd2df41f7d17de291fd5fb5604a18cb682c0
SHA256

36d043c046f5c477a4dfceeff04e991ea186c895d84177b03cb8a714053e2699
SHA512

6ad854191b304293bfb29a7551bc55d5dc3afefe602e4ecc38ec2a256a28b73bc0e8bce065b30d6253929270082ab5c447340255228131e19ca309064e834f5a
SSDEEP

12288:F8VBhp5vdqPA8rfTmkGS0DbLgOTgskCr7uH1abiaG1HHHEfJsxC0sLOTN:FaPqPNbmkujg61kIaVaO1HnEqUPL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c818b68321d26bfabf7b95df4820ec0

Files

1c818b68321d26bfabf7b95df4820ec0
.exe windows:4 windows x86 arch:x86

bb14df7959371fe1871448d9f75da413

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindVolumeClose
GetStartupInfoA
CloseHandle
HeapCreate
lstrlenW
CloseHandle
SuspendThread
GetCommandLineA
Sleep
GetEnvironmentVariableA
OpenEventA
EnumResourceTypesW
GetCommandLineA
CreateSemaphoreA
WriteConsoleA
SetLastError
GetModuleHandleA
FileTimeToSystemTime
DeleteFileA
HeapDestroy

user32

IsZoomed
GetClipCursor
DispatchMessageA
GetKeyState
CreateIcon
DrawTextW
PeekMessageA
DispatchMessageA
GetClassInfoA
FindWindowA
GetWindowLongA
CallWindowProcW
GetSysColor

dmband

DllRegisterServer
DllRegisterServer
DllRegisterServer
DllRegisterServer

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 806KB - Virtual size: 805KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ