1eb142dcdefa3eafd8232475b949497f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb142dcdefa3eafd8232475b949497f
Size

120KB
MD5

1eb142dcdefa3eafd8232475b949497f
SHA1

85802fb9aaff181a9075ff7daf503886e758ad6d
SHA256

398a1eb68b7249fda725c326a082b5f6f4043fc3a93d3ec201b35985611e4371
SHA512

bd44e086ef5286b0996279fd0390a4cbf91f2cb1c980d6e9176a42b13331ddb250f9d6a6f3e2978209772e38ab0fdfef81429c609a1a2ed3ce0cbe49390d793c
SSDEEP

3072:7Xmto6UBdHzIxRMZwqw9+5Wf4spVcwTcP:bmtoHdHz/Zo9+5Wf4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb142dcdefa3eafd8232475b949497f

Files

1eb142dcdefa3eafd8232475b949497f
.dll windows:4 windows x86 arch:x86

12587583dc6829f79465d8fc05c28f6a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetConsoleCP
GetConsoleCP
InterlockedDecrement
GetSystemTimeAsFileTime
lstrcmpiA
WaitForSingleObject
ExitProcess
CreateFileW
FindResourceW
CreateFileA
DeviceIoControl
GetLastError
CloseHandle
GetCommandLineW
CreateMutexA
DisableThreadLibraryCalls
LocalFree
LocalAlloc
MultiByteToWideChar
WideCharToMultiByte
FindAtomW
CreateSemaphoreW
DeleteAtom

Exports

Exports

RandomMemoryFunc

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ