1ee3f6efea76837279c57e0bc89220e8 | Triage

Sharing

General

Target

1ee3f6efea76837279c57e0bc89220e8
Size

54KB
MD5

1ee3f6efea76837279c57e0bc89220e8
SHA1

44b3949a96a5645888282f8be2f2e8140a612732
SHA256

3dfc0be7aa46512a8974f5926340f9618004291e04cb2ebce97a52786b5f09e9
SHA512

b0acc2103bf9ab66c2b9f072f4db86dbf942a9d7f023f4be282516ebe0ed71f610977c4e071bc140cf142a2cda6d8402fe1e2eac888ca1275ffb898e72ac9cd8
SSDEEP

1536:luRqVYmkARSBXlr3OR/X3mH0buexHyTUAys38yexYi:luRqSmleaZX3Jb5yTUAys3Li

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ee3f6efea76837279c57e0bc89220e8

Files

1ee3f6efea76837279c57e0bc89220e8
.exe windows:5 windows x86 arch:x86

c6dfb5609770aadee149c4c3e5e0a9b2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey

kernel32

lstrlenA

shlwapi

PathCombineW
PathFileExistsW
PathMatchSpecW
SHDeleteKeyA
StrCmpNIA
StrStrW
wnsprintfA
wnsprintfW
wvnsprintfW

user32

CharLowerBuffA
CloseWindowStation
ExitWindowsEx
FindWindowExA
GetClassNameA
GetDlgItem
GetDlgItemTextA
GetForegroundWindow
GetIconInfo
OpenDesktopA

Sections

.alwzah
Size: 44KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.azwn
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bkd
Size: 6KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ