1b45410fcfc9f86e1d32af60ca2fe7f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b45410fcfc9f86e1d32af60ca2fe7f4
Size

42KB
MD5

1b45410fcfc9f86e1d32af60ca2fe7f4
SHA1

6e8a73966a2f786a560ed5b8f9c1397a45bde508
SHA256

8eaeac364d9c682dc1b310c4f7940ec2129ff60cfe56abf2e21912dcdbfbb4ba
SHA512

32fb1c58c0a42b02441c761751a1b7cf9b97595d6c6e8793f04f923d15c68b44546c9f6b80ee2d4f4c7f67cd33d5246732650733a2563999bfbd9188e3820090
SSDEEP

768:IZBoZXNybSEln5IyYpamDjobj8ShbeHwGlZqH++kpG:IZBoZXEln5IUmDjoXFbqllnpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b45410fcfc9f86e1d32af60ca2fe7f4

Files

1b45410fcfc9f86e1d32af60ca2fe7f4
.exe windows:5 windows x86 arch:x86

a38650cb369d66580b7111b0447895eb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
wcslen
wcscpy

kernel32

FreeLibrary
LocalFree
GetProcAddress
lstrlenA
WideCharToMultiByte
LocalAlloc
FormatMessageW
GetLastError
LoadLibraryW
ActivateActCtx
CreateActCtxW
lstrcatW
lstrcpyW
lstrlenW
SearchPathW
GetFileAttributesW
ReleaseActCtx
DeactivateActCtx
SetErrorMode
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW

gdi32

GetStockObject

user32

LoadCursorW
LoadStringW
CharNextW
SetClassLongW
LoadIconW
DefWindowProcW
CreateWindowExW
RegisterClassW
wsprintfW
DestroyWindow
MessageBoxW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE