1f9c01167fad32b8a91afbbe22e23d44 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f9c01167fad32b8a91afbbe22e23d44
Size

50KB
MD5

1f9c01167fad32b8a91afbbe22e23d44
SHA1

cecfe156bf47c1cfc9df1ecc1d0edbc9050eb981
SHA256

cd9e43cdff834204900577b0ecd3635db9a228f4bef56471abb22c2eea3145c5
SHA512

9f7f22c91b2eba21caef6f41eb0fff9cb8c51337334c199d965d90dbc91213be527eae2e479b583308f8148dffdcc624d19f8cc22a12b1857c79c8a0b0176772
SSDEEP

1536:Mz6UP4mIkSMjpNov+s3u3zeKRCQ5PKcT6+2Ey3:nhpkjq+2uDeKR9R+j3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f9c01167fad32b8a91afbbe22e23d44

Files

1f9c01167fad32b8a91afbbe22e23d44
.exe windows:5 windows x86 arch:x86

e2777ea2add0b20822925422f6f24f5c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CryptReleaseContext

shlwapi

PathCombineW
PathFindFileNameW
PathMatchSpecW
StrCmpNIA
StrStrW
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CharLowerBuffA
CharLowerW
CloseWindowStation
FindWindowExA
GetClipboardData
GetDlgItemTextA
GetWindowThreadProcessId
LoadCursorA
OpenDesktopA
OpenWindowStationA
PeekMessageA
SetProcessWindowStation
SetThreadDesktop

Sections

.uvohkv
Size: 40KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ufub
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fop
Size: 5KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ