1f901428b6a040267eef7b965cd46c05 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f901428b6a040267eef7b965cd46c05
Size

93KB
MD5

1f901428b6a040267eef7b965cd46c05
SHA1

e2ca39f610d849e88e78b63a6cae2fe143e7091a
SHA256

bdd851d888bcb6e3323c3e6a875f22fbd5c65e509447851d98fb47d986c286c4
SHA512

fcaa9b4de7a26e499738b7d72e0fe77d272c1a77aea5be6301ae24beec990bc376767878c1281976752671178b67c8647d35588df05051f7aad9ed14272664a8
SSDEEP

1536:qE6faOK9bl9em7ojG4dP/NwteQjZVSDRi1sMPWXPRBSy8kJrz9b98HK:qE6faOKcm7CPqMQjZVSs5aP7SoFRB8HK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f901428b6a040267eef7b965cd46c05

Files

1f901428b6a040267eef7b965cd46c05
.dll windows:5 windows x86 arch:x86

404cd78c7338cd6369b954014b2d4f22

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetLastError
GetModuleHandleA
LoadLibraryA
FreeLibrary
VirtualProtect
ExitProcess

user32

CloseWindow
BringWindowToTop

Exports

Exports

Jqeahre
OpenGvlaoum
CloseRevvtqquokn
Tgbrmcx

Sections

.text
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sec3
Size: 128B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ