1b2f520610cc9423f559cfe858bf4b1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2f520610cc9423f559cfe858bf4b1f
Size

14KB
MD5

1b2f520610cc9423f559cfe858bf4b1f
SHA1

d150747f1aee9022280ce609f3cc0827dd846936
SHA256

7fc5f28df042d6d04e5c0bb8e66e471e180c5d555e8ce05340948b8187679a83
SHA512

1d11812a3599a3a1b4723c16bdb4e4f90827ab532ac9f6422343f7ce2ba35a2718ff8d7e5922032a7df7e41bc473143087162a8bd3bb42970ae80e52850d2c32
SSDEEP

192:I3QRj/OdA622lqEkYLXKy+f9I06sUdKFL:kQF0A6dlqEkYLXKyi9hpUdsL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2f520610cc9423f559cfe858bf4b1f

Files

1b2f520610cc9423f559cfe858bf4b1f
.dll windows:4 windows x86 arch:x86

b8054024e057885a9dd868debab563e0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcessHeap
lstrlenA
GetWindowsDirectoryA
ResetEvent
GetVolumeInformationA
FlushFileBuffers
HeapAlloc
CloseHandle
ReadFile
SetFilePointer
CreateFileA
GetModuleFileNameA
HeapFree
GlobalAlloc
GetLastError
lstrcpynA

user32

wsprintfA
GetForegroundWindow
CharLowerBuffA

advapi32

RegEnumValueA
RegOpenKeyA
RegCloseKey

wininet

InternetCrackUrlA
FindCloseUrlCache
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA

Exports

Exports

CheckIEHistory
GetVerID

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 440B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 546B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ