1bd3443bd9875735735ceb879412c769 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd3443bd9875735735ceb879412c769
Size

46KB
MD5

1bd3443bd9875735735ceb879412c769
SHA1

23e440c9195ae891661719e97559ca35aff360fc
SHA256

fccf4ed5bf814320f5f583153a7849316e7ef576dfb3473330c2dda2b2c294a8
SHA512

054a917579753f7d0eb8f49a6c632be3dbf957efdf6f392c8ea1d3d72287784aff408210a87b655a847cd5d0ccbc5137aff486de9e575fc723a66ec6262047a8
SSDEEP

768:Voy30EvLcuwDXh8dlYPwvm+oxflAUV5qpCekTAq:6DewDXGY+oxf+Uukedq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd3443bd9875735735ceb879412c769

Files

1bd3443bd9875735735ceb879412c769
.exe windows:4 windows x86 arch:x86

4acdb373c91468cd3ca6e5c6e368a48e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommMask
SetCommState
GetTimeFormatA
FoldStringA
GetDevicePowerState
Sleep
GetConsoleAliasesA
ReleaseMutex
GetCommandLineA
ExitProcess
GetStartupInfoA

Sections

data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

text
Size: 38KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

idata
Size: 1KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 604B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ