1fb7ac9d36066defaef41b0483b50f43 | Triage

Sharing

General

Target

1fb7ac9d36066defaef41b0483b50f43
Size

187KB
MD5

1fb7ac9d36066defaef41b0483b50f43
SHA1

a359f8340c7e74251427423089b0e7450c40bdff
SHA256

6f83b197f34d8918460d54fb2479f88336a0c64b390c2b7f902b59f842bccd35
SHA512

0f7311b7cac04603fb17bac521e07f90ebd2d6a1f6334793e23d4ff428418d2890a73c56b6bd215d3364516a627916bb8fc71cfa86d4c1cca1ae5d1c83f06511
SSDEEP

3072:RvWuc+oBAiaGN870tvPEg469gk0FCGSELn5sjOPOI6RLRaK//:lQ+oBYZ0tvPEg46GpzSq5sjOPOZz//

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fb7ac9d36066defaef41b0483b50f43

Files

1fb7ac9d36066defaef41b0483b50f43
.exe windows:5 windows x86 arch:x86

65f1779b686361b65fa2914474ac66e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA
EnumResourceTypesA
GetFileInformationByHandle
FlushFileBuffers
WaitForSingleObjectEx
EnumSystemLocalesA
HeapAlloc

shlwapi

PathUnquoteSpacesW

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

user32

GetForegroundWindow
MessageBoxW
KillTimer
CheckRadioButton

ntdll

RtlCaptureContext

Exports

Exports

?InsertCustomData@@YGKXZ

Sections

.text
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ