1b89665f9f216f4f972c413e87c93af3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b89665f9f216f4f972c413e87c93af3
Size

392KB
MD5

1b89665f9f216f4f972c413e87c93af3
SHA1

f0769410fb0e6f4e547933bf6fe2712d1340601d
SHA256

5ecb9eea3dfd8f9661eded8d60f79b65520ec716b900b519a11a2520493fd6f5
SHA512

9a00e19665512bd87a257bd9faf6bdce41105de22c6f840a1caab69cbf267be94b2f9ae222397ec4c7ba0a2c61ae6b3f16598051523faef186385214eba1c69c
SSDEEP

12288:Kd5sTH4JGqud/+GyVod/A0RIhKcGicLoU2:Kd5SSBGyVITRIhKz1Lz2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b89665f9f216f4f972c413e87c93af3

Files

1b89665f9f216f4f972c413e87c93af3
.exe windows:4 windows x86 arch:x86

3711b6eb8c5e06d0eee886f908d69e2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
GetCommandLineW
GetTickCount
CreateProcessA
LoadLibraryExA
lstrlenA
CloseHandle
GetModuleHandleA
CreateFileA
SetLastError
GetComputerNameA
CreateThread
LocalUnlock
HeapCreate
GetCurrentDirectoryA
UnmapViewOfFile
GetSystemTime
LocalFree
PulseEvent
Sleep

user32

SetFocus
CheckRadioButton
GetKeyState
GetDlgItem
FillRect
CreateWindowExA
CallWindowProcA
GetScrollBarInfo
DrawMenuBar
GetDC
DispatchMessageA
DrawEdge
IsWindow

clbcatq

SetupOpen
DllGetClassObject
CheckMemoryGates
SetSetupSave
ComPlusMigrate

inetcpl.cpl

OpenFontsDialog

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ