1bd89e929f409b13360ea96b74a683f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bd89e929f409b13360ea96b74a683f3
Size

437KB
MD5

1bd89e929f409b13360ea96b74a683f3
SHA1

ea1b07070c173e610a377a21d89ec66538a74ae9
SHA256

e74759d4073c607e66570b0ea24e8b6fe5bb627fb38617f8e452f0aafe3e9ab9
SHA512

3ae42ab92220279f3f847804714c6e30f9aaa35b8a3b52995bd581dd206177f24ee5a51085130652c87282ee70621bdd251b0a3bb230ff815d0caee220555c37
SSDEEP

12288:Ic085pJTyCEJk/wNRBuaQaZjGxoz5Z0l7:Ic5jskYRBvCxn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bd89e929f409b13360ea96b74a683f3

Files

1bd89e929f409b13360ea96b74a683f3
.dll windows:4 windows x86 arch:x86

d7c3508003fe891289158ff00efdabf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

Beep
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
ReadFile
CreateFileA
GetModuleFileNameA
GetDiskFreeSpaceA
GetNumberFormatA

Exports

Exports

rzwrzegnc

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 659B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 388KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ