1bb0b2f03e409b4cf1c36475201d6211 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb0b2f03e409b4cf1c36475201d6211
Size

2KB
MD5

1bb0b2f03e409b4cf1c36475201d6211
SHA1

4be14c05137391dd6e2a15ec6b66f9ff40dbfc58
SHA256

ab0be4eafa010c6929ab61f57d7844e8a2f317fff75086246d157ee256576ecd
SHA512

167ba048137a914edb2e5b5b18cf7563b7862e69cb70925ee79bf7c222ea430ec64e49d510ee30771a166a29db673435290ed5551945cbf3c5971d662477a78f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb0b2f03e409b4cf1c36475201d6211

Files

1bb0b2f03e409b4cf1c36475201d6211
.exe windows:4 windows x86 arch:x86

2fb60a0a1d3824a4588d4b5b15648f55

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetProcAddress
HeapAlloc
HeapCreate
LoadLibraryA
CloseHandle

Sections

.text
Size: 512B - Virtual size: 444B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 198B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE