1b6fed12c077dfb9f9c11f135dda9efe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b6fed12c077dfb9f9c11f135dda9efe
Size

160KB
MD5

1b6fed12c077dfb9f9c11f135dda9efe
SHA1

76cbb07f79b5e2ca6a9ace5fc861c82655bdfcb7
SHA256

55700ffc9fed1a73589bb874c58e3ee59928c22b0e7664df9dcd0838a12c6706
SHA512

e6fcca6985e26266091fa4368af13421a2243a46edfdff2bd0bbb07912f9957c26d88ac3c3be640532969b058a4328eabe3f9870e69286d078483eb174cecb0a
SSDEEP

3072:LKwhwaUu39B0pC8/oQsB6W4j3LBWPB0zko+uNQabnZJ:16aRECBd4REBkkod/J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b6fed12c077dfb9f9c11f135dda9efe

Files

1b6fed12c077dfb9f9c11f135dda9efe
.exe windows:4 windows x86 arch:x86

7ff4c0bf321014ece3e5e94e7edae5b9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
EnterCriticalSection
LoadLibraryA
LeaveCriticalSection
GetProcAddress

Sections

.text
Size: 158KB - Virtual size: 176KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE