1ea0d6cdbef3ee9b30f3d711ea80dde0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ea0d6cdbef3ee9b30f3d711ea80dde0
Size

83KB
MD5

1ea0d6cdbef3ee9b30f3d711ea80dde0
SHA1

1d21140ec136edb2fd3e2cb6f01c1465b38fdedc
SHA256

02ec613b759c45e7ddefa6436263de327fcc2811b48eb16011954b0e2a9a28e7
SHA512

414de1d679c2a7d5f71b8f260a9f90340bb1c085c7931df0fcb3209b8f23ab3d8b53d2ea9b01995536d7091a6e8a25e42cde446a8314bd4c9cc1a7a5d1719fed
SSDEEP

1536:ZjYdFMI9wVB1kScaKEjB/w399kI3kfpSeGxJKNydMEhVIkTGJ:lYd+IuVB1k65w9kBsvMBkTGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ea0d6cdbef3ee9b30f3d711ea80dde0

Files

1ea0d6cdbef3ee9b30f3d711ea80dde0
.exe windows:4 windows x86 arch:x86

a1d47ce4a10bc177b44bb9323efba41e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
CreateFileA
FindClose
HeapCreate
UnmapViewOfFile
CreateMutexA
IsBadCodePtr
GetModuleHandleA
ExitProcess
FindResourceA
FreeEnvironmentStringsA
SetVolumeMountPointA
GetACP
HeapDestroy
LoadLibraryExA
LocalFree
LocalUnlock
GetLastError
FreeConsole
TlsGetValue

user32

DrawEdge
GetIconInfo
DrawMenuBar
FillRect
CopyRect
IsWindow
CallWindowProcA
CheckRadioButton
GetFocus
GetDC
DispatchMessageA
GetDlgItem
DefWindowProcW

uxtheme

GetThemeRect
DrawThemeIcon
DrawThemeEdge
GetThemeSysInt
DrawThemeText

clbcatq

SetupOpen

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ