1bb9b4202593749c61016abc6f313e2b | Triage

Sharing

General

Target

1bb9b4202593749c61016abc6f313e2b
Size

45KB
MD5

1bb9b4202593749c61016abc6f313e2b
SHA1

462d0729369c136c7beb1daa80e66cfc4c355cd9
SHA256

f0e057d2aa5068f86a9d627092ad61569041a0e446ccd509152a240be7e4869f
SHA512

4cf40a2ffafd74c1fedf9a5f2a2f167d2a73ca11d1c17573f5dfcd89a9fb0c40623b8c7898513e173b4aac5b3edcc7b591c5a69a3623b9829d0f11dbbafdfa43
SSDEEP

768:inl6Kny22v59UgLoJwmc38c0Lf3krV1SoeXkWis:iZNI9jorOYf2DeX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb9b4202593749c61016abc6f313e2b

Files

1bb9b4202593749c61016abc6f313e2b
.exe windows:5 windows x86 arch:x86

ce1772065187eaf6f903b17e2f311b10

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
FindFirstFileA
FindClose
FindFirstFileW
lstrcmpW
GetCurrentProcessId
FoldStringW
GetCommandLineA
MulDiv
LocalSize
GetFullPathNameW
GetLastError
WriteFile
CreateFileW
SetLastError
SetEndOfFile
LocalReAlloc
lstrlenA
HeapAlloc
HeapFree
CloseHandle
VirtualAlloc
GetProcessHeap
GetProcAddress
LoadLibraryA
GetModuleHandleA
WideCharToMultiByte
GetCurrentThreadId

user32

InsertMenuA
GetMenuState

advapi32

RegOpenKeyA

oleaut32

LoadTypeLi

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 284B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZECT1
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ