1a1ba00b3396f789072f36c78e20a01e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1a1ba00b3396f789072f36c78e20a01e
Size

47KB
MD5

1a1ba00b3396f789072f36c78e20a01e
SHA1

3c4fcb704f0145143576aa0f3c09def3fdfb8ffe
SHA256

ac4dda980af63320b8050988a5335329c77fa2d9921c2634429e6278438cc7e2
SHA512

c20bb3be4bfbe895764516327fcd3fef00ae4a7d9d9959676fcbeda03bd154abdee01c41b50ab841950d78ea292e12d6f60fbe2cadaa69ac355843e07931d70c
SSDEEP

768:4b+4wt04NPktgwA4rp56o+LFdHtAMkZpZmnABdRmUV/ccDUsijeSWMJFg:4y3tLPkG4rp56lxdM3JBdRzRccCWCg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a1ba00b3396f789072f36c78e20a01e

Files

1a1ba00b3396f789072f36c78e20a01e
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 18KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE