1eb1deba4172ecdf6a5197ffcae94024 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1eb1deba4172ecdf6a5197ffcae94024
Size

30KB
MD5

1eb1deba4172ecdf6a5197ffcae94024
SHA1

29776f7eb49a49653fb2810a6766bcd893e902c9
SHA256

d9c3655017df6359efe6836424ab5da6645315b7f892581a25af5d9a5af8e4f0
SHA512

2e7e32c08879c0b325396031ef77c76c7243c057c62f833567b8548c9dba15316503b1a5351e085df35b325b6f0709badfb62101dd91e7d298a3a860d9b7896a
SSDEEP

768:KuFk+/4eVeGdiupqI06uzzoJCt2DKbYTtzWeSp2d:KuFL/5dT5uzzowURzWZK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eb1deba4172ecdf6a5197ffcae94024

Files

1eb1deba4172ecdf6a5197ffcae94024
.exe windows:4 windows x86 arch:x86

710f454264a41a967a3a21098b540598

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CancelIo

user32

PostQuitMessage
SetTimer
SetProcessWindowStation
CloseWindowStation
GetProcessWindowStation

gdi32

GetStockObject

Sections

.text
Size: 1024B - Virtual size: 946B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ