1bb526244a675f6b779d7259851fa9e9 | Triage

Sharing

General

Target

1bb526244a675f6b779d7259851fa9e9
Size

33KB
MD5

1bb526244a675f6b779d7259851fa9e9
SHA1

2bbe71eb23aa8b036569c696916ae87d9fe9dc5f
SHA256

69e9c7a25ad44282b7303396606a45dcc32be154540e4386ae843110a97b05b7
SHA512

346a89c58ea119e129e1d0ba08f25ac91e20f68f9d10bc297e39536aaa76d42f3ddee27d98bf8cfc0cad2de46b45667979c02b010c839f2a9a5cda595d5d4774
SSDEEP

768:7lIGpJ3bZy1SAP6Cb2ye/w4UbDN3jKgUjIjQ0+GtmZuAZonc:5xJLY1SAyQ2yGwRzhIGtvc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb526244a675f6b779d7259851fa9e9

Files

1bb526244a675f6b779d7259851fa9e9
.exe windows:4 windows x86 arch:x86

2ec251c946ee25dec80fd304c1fc008a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress

user32

GetWindowLongA
GetForegroundWindow
GetClassLongA
wsprintfA

gdi32

GdiFlush

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 310B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ