1b8c35f7d4f1cf77d03686d48e867a5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b8c35f7d4f1cf77d03686d48e867a5e
Size

122KB
MD5

1b8c35f7d4f1cf77d03686d48e867a5e
SHA1

6aaa15ca0fcb35fcf397f445e867f443bfa5b946
SHA256

cb60c7ee94b408cb5a0f478144473b422acb6b60412256c7c6b6abecbab5c203
SHA512

050577dccd6458ab6c486a6ac78b96a43141dacf352b5f70fcd5c3f5402f9b933688ea4b4227c410f43d58af4c3cc14603d0b8b4d3ea38303942f70d3aef7f70
SSDEEP

3072:cIZXGCubiYEvgMRqD4vB4ziJRusMp9qpM2Vf4IZ:9Z2HCg4vBIiJos49qWUf4I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b8c35f7d4f1cf77d03686d48e867a5e

Files

1b8c35f7d4f1cf77d03686d48e867a5e
.exe windows:4 windows x86 arch:x86

e907ebc7e666a0d8fbe77f4669ddd6c9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA
DefineDosDeviceW
GetProcAddress
LoadLibraryA
CreateMemoryResourceNotification

user32

AttachThreadInput
UnlockWindowStation
InsertMenuW
MessageBeep
GetMenuInfo

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 369B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 514B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ