1e1ad6cad96dc8b6f641a7f329a2da0c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1e1ad6cad96dc8b6f641a7f329a2da0c
Size

52KB
MD5

1e1ad6cad96dc8b6f641a7f329a2da0c
SHA1

8e2a3e51f59d266a43c79fd6e6acc7015edb0cfd
SHA256

fd041d8f551753b4b9289f2165131b8c9efa30c2aa51f25b79d5adc7cf8e080e
SHA512

e575f08d021ea5bd30acfff9a7f992863548a8d9fc2bd0004090407c3ccdbdd127d3e406a0bdd289d88368e614022815f39dbe2377a350d073912a9860cacbfd
SSDEEP

384:yVNvlnPNBscNZwwwnXwsemvaC5filttMBdwHIOtI+3jb06nD1mHBj:yLhsEZwwwXwsXH56MwHIOGV6pYt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e1ad6cad96dc8b6f641a7f329a2da0c

Files

1e1ad6cad96dc8b6f641a7f329a2da0c
.exe .vbs windows:1 windows x86 arch:x86 polyglot

49ca67be9e14f43acd2ac5ee3463da74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetPrivateProfileStringA
_lwrite
CopyFileA
CreateFileA
lstrcat
FindFirstFileA
FindNextFileA
GetCurrentDirectoryA
GetModuleFileNameA
GetModuleHandleA
ExitProcess
GetWindowsDirectoryA
MoveFileA
SetCurrentDirectoryA
SetFileAttributesA
SetFilePointer
WinExec
WriteFile
WritePrivateProfileStringA
_lclose
_lcreat

advapi32

RegSetValueExA
RegCloseKey
RegCreateKeyExA

mpr

WNetOpenEnumA
WNetEnumResourceA
WNetCloseEnum
WNetCancelConnection2A
WNetAddConnection2A

Sections

CODE
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ