1f5cee201d438027f5c5df54adf06dfb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f5cee201d438027f5c5df54adf06dfb
Size

15KB
MD5

1f5cee201d438027f5c5df54adf06dfb
SHA1

9dd96d0f4da69268ecc8acaa6f973bdc97e7590a
SHA256

b0e6d7e2d7b88b979c076b1a3f55eea2a7fe6d3d3c9a1521d97020dcc007a056
SHA512

77c708f3e1a32c764fb01293588b5c74bb778660d262bc5694a6b32c6651fe8beb400196a00d2c1c9fccc71b2ac21253f03022b52455a52c06eec3a134ab8f9a
SSDEEP

192:T2yOHePkJtHYQwsb2qbH2NEym210YO4WDaZ3WDlgW:TzOLTX57jymaWDaRWDlgW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f5cee201d438027f5c5df54adf06dfb

Files

1f5cee201d438027f5c5df54adf06dfb
.exe windows:4 windows x86 arch:x86

967834ca65d7cd8b6ba97876e791104d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Process32Next
GetCurrentProcessId
Process32First
CreateToolhelp32Snapshot
CloseHandle
WriteFile
CreateFileA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetTempPathA
GetSystemDirectoryA
Sleep
GetPrivateProfileStringA
lstrcatA

user32

MessageBeep
GetMessageA
wsprintfA
MessageBoxA
TranslateMessage
DispatchMessageA

msvcrt

_except_handler3
_stricmp
atoi
strrchr
_itoa

netapi32

Netbios

Sections

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ