1b3f488b688435f2bb5c9201124f3930 | Triage

Sharing

General

Target

1b3f488b688435f2bb5c9201124f3930
Size

38KB
MD5

1b3f488b688435f2bb5c9201124f3930
SHA1

6b3e10c64d4b66842b079f9ff4a94b8b39e15e6f
SHA256

818b58ba66c73ca1d11156251cfb93cf22865afbe712c0e4daea699a1a75609c
SHA512

50d974871b21dad6b9e9e33c11f3030a50fede49900701ba19971cc129fa10477a90c9a75471a58f14fefe6bb16cced2972a802758fa9e038e88bf4a164e150a
SSDEEP

768:3NXRue6AFaIq//AR5SGPsBQiAlS/gzFOAheEC2vyAq:3Nh97FaIu/rcs6W/bAheb2KAq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b3f488b688435f2bb5c9201124f3930

Files

1b3f488b688435f2bb5c9201124f3930
.exe windows:5 windows x86 arch:x86

425d257078e8b5a80cd2adfbee97cbab

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyA

kernel32

GetProcAddress
GetModuleHandleW
lstrcatW
lstrlenW
HeapAlloc
GetProcessHeap
HeapFree
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
WriteFile
CreateFileW
ExitProcess
GetEnvironmentVariableW
lstrcpyW
GetShortPathNameW
GetModuleFileNameW
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
DeviceIoControl
CreateFileA
GetVersionExW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

ShellExecuteW

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ