1bd11c5e4d2af037b9d5f8e0e706f37f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd11c5e4d2af037b9d5f8e0e706f37f
Size

41KB
MD5

1bd11c5e4d2af037b9d5f8e0e706f37f
SHA1

5581888b39eeadbc7ec44cbc78f8441fb1c8375d
SHA256

8cebd672ac39b8e4e349fe418317aee752543774f62d681fb55777cc60027655
SHA512

009fcfe410b947fd58bf6587f2a6e7707ce43dfb923c21b16adbdb88812b47d7312bce52046420424fbb43f0bdc58d810786843173ee975f7596fa0ad6afb558
SSDEEP

768:NOzDJpRvOTS92KFY4YL90EEvM25H+7v4CF0mEyY1ry2bBlp4HQN/muxcrwYL4Lrp:NO3RWIIDhEE4uyPryOLp4Ha3xaiLiHI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd11c5e4d2af037b9d5f8e0e706f37f

Files

1bd11c5e4d2af037b9d5f8e0e706f37f
.exe windows:4 windows x86 arch:x86

ed762f21df4d0a3d8dbe4856d5c8a47e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileSectionNamesW
PeekNamedPipe
GlobalFix
ReleaseMutex
EnumDateFormatsExW
CreateThread
GlobalUnfix
ChangeTimerQueueTimer
EnumSystemLocalesA
VirtualProtect
GetCurrentDirectoryA
CopyFileExW
GetAtomNameA
ExitProcess
SetCommTimeouts
_hread
WriteProfileSectionA

user32

LoadBitmapA
GetSubMenu
RegisterClipboardFormatA
CtxInitUser32
CreateWindowExA
IsIconic
CharPrevA
wsprintfA
SetCursorPos
RegisterLogonProcess
GetMessageA
BringWindowToTop
CreateDialogIndirectParamAorW
DdeQueryConvInfo
MessageBoxIndirectA
GetDoubleClickTime
SetWindowTextA
DialogBoxIndirectParamW
IsDialogMessageA
CreateIcon

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE