1b1df10e26b0997725b8922eafed5a29 | Triage

Sharing

General

Target

1b1df10e26b0997725b8922eafed5a29
Size

57KB
MD5

1b1df10e26b0997725b8922eafed5a29
SHA1

34b30747e200f9bf594088a3076ae115cccc6964
SHA256

66deba5854a6c49a196fbb5612cec78e6a53610ba4e11756a976df586217c2b1
SHA512

c7ee596bb10bb0bcc92fac7e19bbf934f639845cbba43d0cf216afaef7bff4e0450f5649ac569074e7d974e208d85160d1d17001071bc421bd5733ce11f9e1c7
SSDEEP

768:w3Nl57q8uH2gdN6r9iXW9ofVj37lsFPWu02Z8cI2aTiW+Xat:wlGt2wjm9oF37lUnZK+qt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b1df10e26b0997725b8922eafed5a29

Files

1b1df10e26b0997725b8922eafed5a29
.exe windows:4 windows x86 arch:x86

d46d1d889c5fa90e3944ca716af7fc89

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
GetACP
ReleaseMutex
GetEnvironmentVariableA
LocalFree
lstrlen
PulseEvent
TerminateThread
GetModuleHandleA
SetLastError
GlobalUnlock
CreateMutexA
TlsGetValue
FindClose
HeapCreate
LoadLibraryW
CreateFileA
CloseHandle
IsBadStringPtrW
FindResourceA

user32

FillRect
GetDC
CopyRect
DrawEdge
GetIconInfo
SetFocus
DispatchMessageA
DefWindowProcW
IsWindow
CallWindowProcA
CheckRadioButton
GetDlgItem
DrawMenuBar

msasn1

ASN1BERDecNull
ASN1BEREncEoid
ASN1BERDecCheck
ASN1BERDecBool
ASN1BEREncBool

dpnet

DirectPlay8Create

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE