1ffb1c3b1dce483ba1ff657d379c4695

Sharing

Copy URL Twitter E-mail

General

Target

1ffb1c3b1dce483ba1ff657d379c4695
Size

149KB
MD5

1ffb1c3b1dce483ba1ff657d379c4695
SHA1

ea1b0b86fd611bb7ffb79f64bb16e2eb4aa9c65f
SHA256

ddefe37123e8f3ebc370610b3f44c5dea83057ad1ffc5436a1be4a9e492f2938
SHA512

22b473becc13376d73a1114ca35a22c9c7087c87ffe99f7d9c4213ff7c9ff3820711b8606261e1a8293449dae833fa5e6acb4b236e12e7f2fd1127f9afcda03a
SSDEEP

3072:ac8+4aDVouciFCaaMkSt2tioSjYND9bNCwgeRGuyaLB4Cku7:AaDncqyutLMJ4QQIL6Cku7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ffb1c3b1dce483ba1ff657d379c4695

Files

1ffb1c3b1dce483ba1ff657d379c4695
.exe windows:5 windows x86 arch:x86

d16c70ef93ba4b37b7c8746ca32c4b4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleW
VirtualAlloc
GetSystemTime

winspool.drv

OpenPrinterA
ClosePrinter

shlwapi

StrToIntA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..BSS
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

..BSS0
Size: 1024B - Virtual size: 768B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gu1ds
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gu2ds
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gu3ds
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 13B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d16c70ef93ba4b37b7c8746ca32c4b4c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

shlwapi

Sections

.text Size: 1KB - Virtual size: 1KB

.rdata Size: 1024B - Virtual size: 956B

.data Size: 2KB - Virtual size: 2KB

..BSS Size: 512B - Virtual size: 256B

..BSS0 Size: 1024B - Virtual size: 768B

.gu1ds Size: 1KB - Virtual size: 1KB

.gu2ds Size: 1KB - Virtual size: 1KB

.gu3ds Size: 512B - Virtual size: 256B

.tls Size: 512B - Virtual size: 13B

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 512B - Virtual size: 1.7MB

.text
Size: 1KB - Virtual size: 1KB

.rdata
Size: 1024B - Virtual size: 956B

.data
Size: 2KB - Virtual size: 2KB

..BSS
Size: 512B - Virtual size: 256B

..BSS0
Size: 1024B - Virtual size: 768B

.gu1ds
Size: 1KB - Virtual size: 1KB

.gu2ds
Size: 1KB - Virtual size: 1KB

.gu3ds
Size: 512B - Virtual size: 256B

.tls
Size: 512B - Virtual size: 13B

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 512B - Virtual size: 1.7MB