1b09b51a74271cc6d0336f927cc99943 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b09b51a74271cc6d0336f927cc99943
Size

28KB
MD5

1b09b51a74271cc6d0336f927cc99943
SHA1

f6eadb137f610a958bff11a59bd1e42397f9c2cf
SHA256

3a87a683a5a0f6fe93d0429e5f28ef03a942b85813e08edc151bfcbb473188ee
SHA512

be5788face62abb62c020dca690a5ea7ec01e641f0fec1c69ff9c4b236d1c157230078538f498de4fc3216cf3623b2938c69b8ae20dd21e41f57aa51685a60ab
SSDEEP

384:4Yzwaj1VC7JaXzzp0dgbTbt0DNKyE8ycyXZ9BhgZ09gEqW0Vw:CajfqJMzNp5p3hs0qLVw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b09b51a74271cc6d0336f927cc99943

Files

1b09b51a74271cc6d0336f927cc99943
.exe windows:4 windows x86 arch:x86

522d8e4b8d7784d6fa7f4b0296f950da

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
LoadLibraryExA
GetProcessHeap
GetEnvironmentVariableA
TlsGetValue
DeleteAtom
ReleaseMutex
SetLastError
GetModuleHandleA
lstrlenW
GetStdHandle
GetCurrentThreadId
GlobalFree
CreateFileA
CloseHandle
GetExitCodeProcess
TlsAlloc
CreateMutexA
HeapCreate
GlobalUnlock

user32

GetDlgItem
GetDC
GetCaretPos
DrawEdge
CallWindowProcA
DrawMenuBar
CreateMenu
CreateWindowExA
IsWindow
CheckRadioButton
FillRect
DispatchMessageA
SetFocus

rsaenh

CPDecrypt
CPDeriveKey
CPHashData
CPSignHash
CPGenKey

msasn1

ASN1BERDecEoid

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dhzhtzz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE