1ed53243c5fe8e192ebc3466a34724c5 | Triage

Sharing

General

Target

1ed53243c5fe8e192ebc3466a34724c5
Size

72KB
MD5

1ed53243c5fe8e192ebc3466a34724c5
SHA1

89c9e3687accd331ab58910be79620c2dd370b99
SHA256

16f824873dcebe9eede65da5a6a7ac0e02613cd071fd99e7fa536ad1553ea4de
SHA512

e35fb2eefb5d391a19b195bd43744d6b1f552830dc40658cc9b04234c74e36cb7933d0942cd6f338ef3272716f83d0b523ced16a6570c362a7b1b5e743163dd6
SSDEEP

1536:6ZR5M0GUPMWLpbQ/UTO7wCA3M4twLtJsABra:+mUrcc9vLt8LBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed53243c5fe8e192ebc3466a34724c5

Files

1ed53243c5fe8e192ebc3466a34724c5
.exe windows:4 windows x86 arch:x86

7cb87fc819863943ab9c765bf031f753

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
FindClose
ReleaseMutex
TlsGetValue
GetPrivateProfileStringA
LoadLibraryW
GetEnvironmentVariableW
HeapCreate
GetCurrentProcessId
GetCurrentThreadId
FindAtomA
InitializeCriticalSection
IsBadStringPtrW
GetFileTime
ReleaseMutex
WriteFile
GlobalFlags
GetDriveTypeA
CreateEventW
lstrlenW

user32

SetFocus
DrawStateW
GetKeyboardType
CallWindowProcW
DrawTextA
IsWindow
DispatchMessageA
GetSysColor
GetClientRect
CreateWindowExA
GetClassInfoA
EndDialog
GetSysColor

rastapi

DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone

clbcatq

DllGetClassObject

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

omlbypz
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE