1bc01e84a141e1a82801ae1533407a14 | Triage

Sharing

General

Target

1bc01e84a141e1a82801ae1533407a14
Size

7KB
MD5

1bc01e84a141e1a82801ae1533407a14
SHA1

d7c8955365704486d774734b3eef137681758c54
SHA256

8de7e4c00012d73153e9353adea064077df74beb8a20770ec3aa8c92584f2058
SHA512

fb1e17b8930cf6495ef3066bd399778024a6dddedd2a35617a9a985fc3180a2c00958071635d4762800b02ea152ee1fa2d2d4da1886fc243b69b61e246172c5c
SSDEEP

96:IQFv9RzPkmZ2JtGghHz2byQygMVgWT09zZnwjjD+bnfc0zk/:IUv9JrZ2uaHybwgMVT09zZn+jDF0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bc01e84a141e1a82801ae1533407a14

Files

1bc01e84a141e1a82801ae1533407a14
.exe windows:4 windows x86 arch:x86

b78e763ea9a9f03cca84adbed9ade51b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileA
CreateThread
ExitThread
Sleep
VirtualAlloc
VirtualFree
lstrcmpA

user32

EnumWindows
GetClassNameA
SendMessageA

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 344B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ