1fbec24e58a5af0287f1ef04de1e8068 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fbec24e58a5af0287f1ef04de1e8068
Size

34KB
MD5

1fbec24e58a5af0287f1ef04de1e8068
SHA1

b0963946129a4449f2e27eb94d23ee627fd60f78
SHA256

54af0eec06be45c69333d7f2a0318e991bc966c2a9fb2bad3ea2f35a82221d6a
SHA512

047a76fa590926b844fb161c5ec04a844625472e24f338be3d4e365498cd541d055f8c0d7f149a5e46b346180b0869e14cd9413727b2776886213dca6e829000
SSDEEP

768:QM3zKU3tn7J8qTHBYmAySti8S9/gt15Vvjupn:lrnuYHBYbyaPjt1T6pn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fbec24e58a5af0287f1ef04de1e8068

Files

1fbec24e58a5af0287f1ef04de1e8068
.exe windows:4 windows x86 arch:x86

f8960d4836dc6d548ee4efadd8fe3486

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
LoadLibraryA
MoveFileExA
VirtualAlloc
lstrlenA

user32

CheckDlgButton
FindWindowA
GetWindowLongA
SendMessageA

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE