1bcb7ae4f5b6937744599ce797526d02 | Triage

Sharing

General

Target

1bcb7ae4f5b6937744599ce797526d02
Size

235KB
MD5

1bcb7ae4f5b6937744599ce797526d02
SHA1

8aada64fe3a94e906f6d29f9611cbb1b47395b0b
SHA256

42f84feb3abc30faa25d6b47825acb25d373deebc904871c2fada879c5a8ef4b
SHA512

3cdf377a2b6bc80509ee215e447e7d3c28973182cb95bec7f8c06029463414ac05f8afc66d4532b565e1948bc8c1f4737e711a401a6394ecde0b98c31191b2e5
SSDEEP

6144:X0lB+zHRaI+EQazMDFBoMV5kJwHmMZnGEQ:EGbRaxxbxr5kJRcnGJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bcb7ae4f5b6937744599ce797526d02

Files

1bcb7ae4f5b6937744599ce797526d02
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

ce6c6f6f01e9d913e2427fb644a3dc45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetSetOptionA

Sections

CODE
Size: 226KB - Virtual size: 716KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE