1b98e81f1519cf3056e9d792e458143c | Triage

Sharing

General

Target

1b98e81f1519cf3056e9d792e458143c
Size

484KB
MD5

1b98e81f1519cf3056e9d792e458143c
SHA1

7280f2dd91e6c023724ac6fe65c16a83f3ae1468
SHA256

4543761f29eac6dfa0711885c17fd079c7182588b2c9ea57de8aebfabce8e1dd
SHA512

ed2af61f93c1cc049994d8eee1716bde286e89235c631c2eddaeaef8a338786001c6734a3957e7180702d143e7ea4b8aa073eac9bc420652fca6228f853e5d62
SSDEEP

12288:vD6kK42nuyp6eCYvBSUEVL+NXxpXDpRCd55agxgGtLkhO23F:vD6kCnuO60UULvzpRCd/aQpLkt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b98e81f1519cf3056e9d792e458143c

Files

1b98e81f1519cf3056e9d792e458143c
.exe windows:4 windows x86 arch:x86

5dc2ef6e387369b8064a1596ab28ea56

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
GetCommandLineW
IsValidLanguageGroup

user32

LockWindowUpdate

Sections

.text
Size: 480KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 151B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE