1bb64bb02dc4de328656097cee137531 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb64bb02dc4de328656097cee137531
Size

656KB
MD5

1bb64bb02dc4de328656097cee137531
SHA1

5bd21014499078b9aed43ed1100c3a40521d916c
SHA256

1e3cbc3a28f17903ff30c7f826db04d3f435a5f8420a8747aded3d9f70185be3
SHA512

89afb95dcbf453ae4456322d64f430ec87325ae5a00871917b97b160c4f67309f80e84ba007b2e8c707cc831c21db15f02aa6b7cf25b34a069d9f46fe309e77c
SSDEEP

12288:esLRvaSieu4Ovgi4aQiKYrtKIUyyXigBV6vQoALxd4+D30E4H4lxj/gAllVm1anJ:r1liOOvgi4CKOIcuE+XNw4TLnm1aX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb64bb02dc4de328656097cee137531

Files

1bb64bb02dc4de328656097cee137531
.exe windows:4 windows x86 arch:x86

66f9565b59952a113450034b6a4e4d6e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

winmm

timeGetTime

msvfw32

ICSendMessage

avifil32

AVISaveOptionsFree

Sections

CODE
Size: 642KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE