1b09ba36776d3ea24c1534de1fade851 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b09ba36776d3ea24c1534de1fade851
Size

351KB
MD5

1b09ba36776d3ea24c1534de1fade851
SHA1

391238e0c22197b126e02351e73a6d8c3cda5d11
SHA256

076bb495e2b9e4434687c73d8e9bd9a6fb94b59998c90566050b5d1597030c67
SHA512

1850efb7bb4436e44bd835cb30bb553ef23231eb06088b54ae8abfab8d1a5cebf4d1d6d43e930dc954f9608ed1df31efd861e212d523c2816fc32bab2d005967
SSDEEP

6144:eM4XLY+YbkK2vglG3Q9XNvhHf2I9fNyTNHU2vyFbJZ3IiWedZzFcJUGVpGx:aXX6kxFQ9dvhH591yTXvKbJZ49edZxcO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b09ba36776d3ea24c1534de1fade851

Files

1b09ba36776d3ea24c1534de1fade851
.exe windows:4 windows x86 arch:x86

fce67081bb4c464c1e4676b63bc118df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
LockResource
LoadResource
SetLocaleInfoW
FindResourceA
LocalAlloc
LocalFree
CreateFileA
lstrcmpA
GetFileAttributesA
GetProcAddress
GetModuleFileNameA
GetTempPathA
DeleteFileA
CloseHandle
GetCurrentDirectoryA
GetLocalTime
FindClose
FindNextFileA
FindFirstFileA
EnumResourceLanguagesA

oleaut32

SafeArrayDestroyDescriptor
SafeArrayDestroyDescriptor
VarFormatDateTime
CreateErrorInfo
OleLoadPictureEx
GetErrorInfo
SetErrorInfo
GetActiveObject
VariantInit
SysFreeString

msimg32

TransparentBlt

Sections

.text
Size: 219KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE