1ecd77888c5aca038f1b4896ec83cc03 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ecd77888c5aca038f1b4896ec83cc03
Size

208KB
MD5

1ecd77888c5aca038f1b4896ec83cc03
SHA1

f2c3726c599f1e7cfaf506156ebf9885c1ebdbc7
SHA256

3204c6d63a5d0f6955569c52b6d26f805b6fb0c5ba5d2b854be7b80da3344d2e
SHA512

04b5858ee8cc6b96c1f8442d3681d8b4b31666b9c0a69c8cede8499e823a579f457656df6a04f1982b20d2b112cef88a5b09add27b7d627e22b5538cf9c0501a
SSDEEP

6144:4l8sGtoGDSrR75MjqA1ZPPaDYPrYctZv4BqLv6Vc93:UKvD4RlMbpaWrYoJmUvsw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ecd77888c5aca038f1b4896ec83cc03

Files

1ecd77888c5aca038f1b4896ec83cc03
.exe windows:4 windows x86 arch:x86

691f1193f16065947032ace3a2329e55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

msvcrt

fabs

comctl32

InitCommonControls

user32

IsChild

gdi32

BitBlt

ole32

CoInitialize

shell32

ShellExecuteExA

shlwapi

PathQuoteSpacesA

Sections

.MPRESS1
Size: 203KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE