1f9ace65b97a90bd36c44544b27690a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f9ace65b97a90bd36c44544b27690a5
Size

11KB
MD5

1f9ace65b97a90bd36c44544b27690a5
SHA1

20b60346d82df3a602420c073df424464ed9cb5f
SHA256

9c65a8f5c8aa42ff2d7f80237ec3aee28272454e9500aa38568295d99c9cba4e
SHA512

5fb1ba63c26c790344bbec82d8047cbccbd0f78b7a97c3951e1d249313d41b1c85c6bd081054bd0241050beb512c734553b1025c5125835a279e1dd0566e68d4
SSDEEP

192:QCgr4v2bZWG5Nx4GnBihsHwONwp4V2QQgLwfuQ92rZSsdvG09SAn:1G4veZWG5QGBIwwONwpMQ2RUsFGc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f9ace65b97a90bd36c44544b27690a5

Files

1f9ace65b97a90bd36c44544b27690a5
.exe windows:1 windows x86 arch:x86

dce98a9f8ab2a3dba293bede73983c81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CopyBindInfo
GetComponentIDFromCLSSPEC
IsJITInProgress
IsLoggingEnabledA
IsLoggingEnabledA

wsock32

WEP
WSAAsyncGetProtoByNumber
WSAAsyncSelect
WSAAsyncSelect

comctl32

GetEffectiveClientRect
GetMUILanguage
ImageList_AddIcon
ImageList_AddMasked
ImageList_BeginDrag
ImageList_Copy
ImageList_Create

advapi32

AbortSystemShutdownA
AddAccessDeniedAce
BackupEventLogA
BuildExplicitAccessWithNameA
BackupEventLogA
BuildExplicitAccessWithNameA

Sections

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE