1ed92c6129bf821c399d5982352eef20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ed92c6129bf821c399d5982352eef20
Size

61KB
MD5

1ed92c6129bf821c399d5982352eef20
SHA1

5a5da59e1b5e500c1052a1b514772ba2efde6946
SHA256

433e4eed6d6814bac8fd37f3290ce235b5ee4fbb45454ac3c61af51dff32107f
SHA512

535724c185db1ed8abfe4dabc8f2f9665b8849c0c5e39012959bfc1061d6127aec10b824e7f44317399869e99ce12a3294eb240a31ba7e574ea8143e61d0175d
SSDEEP

768:BWJiDeWpVSoXzWdW1mrm1FBFXtsCBRgvSlUlQ01cmiAC1uqFUR0:BW2eWk41mifnBRCSC+NJE06

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ed92c6129bf821c399d5982352eef20

Files

1ed92c6129bf821c399d5982352eef20
.exe windows:1 windows x86 arch:x86

59bc32ec477c1ff92dfd4c061892f2b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

user32

CreateWindowExA

gdi32

GetTextMetricsA

msvcrt

__set_app_type
_acmdln
__p__commode
__p__fmode
memcpy
__getmainargs
__setusermatherr
_except_handler3
_XcptFilter
_exit
_initterm
exit
_controlfp
_adjust_fdiv

kernel32

GetStartupInfoA
GetModuleHandleA
HeapCreate
HeapAlloc

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ