1bb05a8ca5911b92882e757231e341ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb05a8ca5911b92882e757231e341ca
Size

121KB
MD5

1bb05a8ca5911b92882e757231e341ca
SHA1

04111e5cb0a1240a81713428c9590e1a9ba37f1f
SHA256

43d108df0c08cad0aba38b4b7911cd0b688d668616ae6f2656c9c486a26a9342
SHA512

67d821a8fe44674f2e49d49382dc5abc6b1835fa3b6b4bf05f925b52b32192f25219c337a6489136dc05f7c65f44ef44961a46492e567e25eca591dd9f9f031d
SSDEEP

3072:d79PD0lqMSfGPZEZi3bGz2y/QpOJxp8VqttQ+:1pD0QMSfaZxb42dQI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb05a8ca5911b92882e757231e341ca

Files

1bb05a8ca5911b92882e757231e341ca
.exe windows:4 windows x86 arch:x86

9aaca10d9ac8afb412653a54fa3ebc41

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetCommandLineA
VirtualAllocEx
lstrlenA
IsBadHugeReadPtr
GetACP
ExitProcess
IsBadReadPtr
GetCommandLineW
GetLastError
LoadLibraryExA
ExitThread
GetModuleHandleA

Sections

CODE
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ