1dc0bda2ba1432cdcaee19205065dc66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dc0bda2ba1432cdcaee19205065dc66
Size

488KB
MD5

1dc0bda2ba1432cdcaee19205065dc66
SHA1

426f3fa7448272d884e1755af16716487d2016fd
SHA256

56c282ca2d100b27bbfa76aba5eac0e53c14ee4cd70df1197a1ec53d8896a746
SHA512

f1e83dd5d30333005abb936ac096ce98b49debcfa0154264681576badbc1608794e124386eabd62d2b27ac89d6df9c1d80eb946a7f42e95aa3bdb0f384a6e703
SSDEEP

12288:KK06iYKS/AF2WnpD321dzk5oz4MZAQZ4iXElTitmPUT5Hc:vzWSVWn1327k5oE5iXE9itmPUTe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dc0bda2ba1432cdcaee19205065dc66

Files

1dc0bda2ba1432cdcaee19205065dc66
.exe windows:4 windows x86 arch:x86

db73d4b660baf1472ebf12cb4a0d342c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragQueryFileA

ntdll

RtlIpv4AddressToStringExA

user32

GetClipboardOwner
GetMenuContextHelpId

kernel32

GetCurrentProcess

Sections

.text
Size: 479KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 250B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE