1f1e042e7adffbd3476f26af722bacd2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1f1e042e7adffbd3476f26af722bacd2
Size

354KB
MD5

1f1e042e7adffbd3476f26af722bacd2
SHA1

7960e2ac69b366b4affc19de569580856764c752
SHA256

62da4277ddcec81cadbd77d9d0f2b76caca4beee500226c2c55830e6a36822ce
SHA512

7bee217ab6f473e297243be754804541ce540979f31d543a55a38915943a518e70f06e5afc9356a03c9a8eec0677793656b9b092093cfebf972f79e84cc446ed
SSDEEP

6144:I2pRrUqddTQZokHvyrQJvnRIAYjY35AiZkpoks5UF1Sf5jGPW2LdMgDbq6nk1/3i:IqUudBkPyUJZIIJpkDrF1SoP/dTBk1/3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1f1e042e7adffbd3476f26af722bacd2

Files

1f1e042e7adffbd3476f26af722bacd2
.exe windows:4 windows x86 arch:x86

193ddcac0a7502c98e27a0c863ea47ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsDebuggerPresent
FreeLibrary
GetProcAddress
EnumCalendarInfoA
LoadLibraryW
WideCharToMultiByte
DeleteFileW
GetFileAttributesW
GetTempPathW
GetTempPathA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
SetEndOfFile
GetFileSize
LockFile
GetModuleHandleA
UnlockFile

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatNumber
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 235KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE