1b37973e2405dca7656ecd9dc36c05f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b37973e2405dca7656ecd9dc36c05f6
Size

56KB
MD5

1b37973e2405dca7656ecd9dc36c05f6
SHA1

0f9372d1eed4515b427d4899e1501ac3d5c150d5
SHA256

31fa00b279fafd65380d4bca0e5a1c78f12262459a82e1b99eb7b557d3444d09
SHA512

8347143727ca654a99610456b41be3533d8695b2dede797b54879d00186ddfac1ccb07b9129eaff0369dc99c1ac9dffe6db883ed3287b7b4ed35d4c386b8d63b
SSDEEP

1536:gA3gzOYXLbdxK2ZbEM2dFpqQXNZissrAdu8n2f1Kw:gAZCZZb16qQXNcssx82f1Kw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b37973e2405dca7656ecd9dc36c05f6

Files

1b37973e2405dca7656ecd9dc36c05f6
.exe windows:4 windows x86 arch:x86

245b82c647ce51a4b6809e923bb76b82

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCommandHistoryLengthW
GetSystemTimeAsFileTime
DebugActiveProcess
OutputDebugStringA
MulDiv
IsProcessorFeaturePresent
LZSeek
DebugBreak
GlobalAddAtomA
DebugSetProcessKillOnExit
SetHandleContext

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE