1b27657b99be0e3fc8792fcda6a3352d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b27657b99be0e3fc8792fcda6a3352d
Size

73KB
MD5

1b27657b99be0e3fc8792fcda6a3352d
SHA1

09b79ae10d4a0362871a99a55a2b9bb46c8856ec
SHA256

11c668e935f1fa9278235e8574860c9fcde3274ca2f38b92e3baef2d4c665a79
SHA512

f2bddb8bbf0afa01b03acdc226bacd131f42a8fca6799cb4ae6f91b8edbe6ea57d917529a535f12e517bf91a170071202d2109fda6fb7b9d7e0b034bde84645d
SSDEEP

1536:MiuVDgY08B3gIDHg47epUxWdG3av2RfOCs96WXqgq8n9r:MiuVEPIDA4CHgw2RfTsLXqu9r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b27657b99be0e3fc8792fcda6a3352d

Files

1b27657b99be0e3fc8792fcda6a3352d
.exe windows:4 windows x86 arch:x86

bde266f7c0afc1c4db69c41f0588e90c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

_initterm
_errno
_unlock
__dllonexit
_lock
_jn
_onexit
swscanf
memset
_vsnprintf
_CxxThrowException
towlower
?what@exception@@UBEPBDXZ
??0exception@@QAE@ABQBD@Z
toupper
iswctype
wcsrchr
memcpy

kernel32

GetProcessHeaps
HeapCreate
HeapSize
GetStdHandle
HeapValidate
HeapReAlloc
HeapDestroy
SwitchToThread
DeleteTimerQueueTimer
TryEnterCriticalSection
InitializeCriticalSection
LocalFileTimeToFileTime
SystemTimeToFileTime
CompareFileTime

gdiplus

GdipGetImageThumbnail
GdipCloneImage
GdipDrawImageRectI

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ