1fb2d107a9a590189152607485fc059e | Triage

Sharing

General

Target

1fb2d107a9a590189152607485fc059e
Size

53KB
MD5

1fb2d107a9a590189152607485fc059e
SHA1

9f4668790f6ffc2ae41790bbe25d0531cffb3167
SHA256

4a874d8ee9abed9994f981a808c61cd855dd07842958d6c968fd2d8ab58c9d2d
SHA512

9314e8059028a4f809829ac689accb5b4498fc961def3f30995b142ed69d9c70a50858e8e424ab533e33f2068b4f7a7b8867003bb27b0d02bf63525b100c5270
SSDEEP

1536:J5q+IxOY3hNp+fDfm0i2thddIIq+1PCKp7g:7q+IxOGT+q0iGdeIq+b7g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb2d107a9a590189152607485fc059e

Files

1fb2d107a9a590189152607485fc059e
.exe windows:5 windows x86 arch:x86

1b28ac24c02c67bd9e5bef1a162bfe20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA

kernel32

InitializeCriticalSection

shlwapi

PathCombineW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
StrCmpNIW
wnsprintfA
wnsprintfW
wvnsprintfA
wvnsprintfW

user32

CloseWindowStation
GetClassNameA
GetDlgItem
GetDlgItemTextA
GetWindowLongA
GetWindowThreadProcessId
OpenDesktopA
PeekMessageA
SendMessageA
SetThreadDesktop

Sections

.ebidmr
Size: 43KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.udktwv
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vsb
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ