1ab5419009212b372b13e31679983dc4 | Triage

Sharing

General

Target

1ab5419009212b372b13e31679983dc4
Size

100KB
MD5

1ab5419009212b372b13e31679983dc4
SHA1

1e6aafa6973b37637cd9ac2567e97ec179c428f8
SHA256

64c6a0dd8405a6141fea6e133a2d84248dc5acc8104450de7a8858de4749ff00
SHA512

a850cc28f11b8ee9069aeba9157dbc31de7c88d95d093641153228810bc9a3ec03f6886b0c6d994a065b31977960b0fac69db31873a75eb52480d3c3821c4a2a
SSDEEP

3072:kTXs32qW/3EJAC1MrViClEv7w3RIz+PJ6eU4C:kje2qmV1W72RIz+P6P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab5419009212b372b13e31679983dc4

Files

1ab5419009212b372b13e31679983dc4
.exe windows:4 windows x86 arch:x86

217190828ad9a5b696102277c496c499

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetCurrentProcess
GetModuleHandleA
DeleteFileA
GetTickCount
ReadFile
CreateProcessA

ole32

CoInitialize

user32

MessageBoxA
DispatchMessageA
GetMessageA
CreateWindowExA
ShowWindow
DestroyWindow
DefWindowProcA
SetWindowLongA
GetWindowLongA
UpdateWindow
PostQuitMessage
GetSystemMetrics

advapi32

RegCreateKeyExA
RegDeleteValueA
RegOpenKeyExA

shell32

SHGetMalloc
SHGetSpecialFolderLocation

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 860B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ