1bb3ddbb19397c330d65c4fa222cf679 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb3ddbb19397c330d65c4fa222cf679
Size

93KB
MD5

1bb3ddbb19397c330d65c4fa222cf679
SHA1

2155ddd50e6cd9c7e6d071d5592d37c472664ddf
SHA256

a13fbc49a4ccb70e821762172b0c4ca28170cd5a71513402a7daad191f9c4fa7
SHA512

789cd64bd66811e946bd5b3b41910efa7836179e333a896e1b6c266c9ffe3f3d7e465eee3ab02052c418d33f2c4e7c04ea0281acb455dad6a5dbd6ab19df1801
SSDEEP

1536:wSUXR8ZtUou28QZco/LG8DsmD/2MasdZE5a0H5LBL5UdCbXi55LLb/:6XVoDBT/2Mas3YxJXX4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb3ddbb19397c330d65c4fa222cf679

Files

1bb3ddbb19397c330d65c4fa222cf679
.exe windows:5 windows x86 arch:x86

7d6b4f48df4c532a1e75d43ebafbec02

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowLongA
GetInputState
DeleteMenu
DestroyMenu
GetMenuItemCount
GetCursorPos
BeginPaint
SetWindowTextA
EndPaint
LoadIconA
LoadCursorA
GetCursor
PeekMessageA
RegisterClassExA
CreateMenu
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
CheckMenuItem

gdi32

DeleteObject
MoveToEx
CreateSolidBrush
GetStockObject

ole32

RevokeDragDrop
StringFromCLSID
CoTestCancel
CoGetCallerTID
OleIsCurrentClipboard
ProgIDFromCLSID
CreateILockBytesOnHGlobal
CoInitialize

oleaut32

CreateErrorInfo

comctl32

GetMUILanguage

kernel32

GlobalFree
GetModuleHandleA
GlobalAlloc
InitializeCriticalSection
DeleteCriticalSection
GetEnvironmentStrings
FreeLibrary
GetLastError
LoadLibraryA
HeapAlloc
HeapCreate
LeaveCriticalSection
GetLocalTime
GetCPInfo
GetSystemInfo
EnterCriticalSection

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE