1b9dfe084a663a4f2cd48df6575bd1cb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b9dfe084a663a4f2cd48df6575bd1cb
Size

170KB
MD5

1b9dfe084a663a4f2cd48df6575bd1cb
SHA1

2674611ba8527da627ccd21e539a43beb93442d4
SHA256

4e80723fb6ebb7aadc807cd849c026dcecfb47641d1525293826c25ac080fa85
SHA512

30a191fff0becdfa1ed13edc7f7383ed5443979e07899e154d2dc2e320a5228aed070a892b599cb8c574dd3bf131e1f59debc7bcaaa1a7574c43358f1b7f284d
SSDEEP

3072:CNZKhVxa9Oq0jMONNWtqjZzgp8DLgHDNHUc7kcDO8spp2IGjgEiFKq90PY2cAHNH:CKh34O6BqjZqOLgHKc7kckEIOpdq90ww

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b9dfe084a663a4f2cd48df6575bd1cb

Files

1b9dfe084a663a4f2cd48df6575bd1cb
.exe windows:5 windows x86 arch:x86

ed762779cda590f5812c0341d0aeadb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
HeapCreate
HeapAlloc

gdi32

SetDCBrushColor

comdlg32

ChooseColorA
ChooseFontA

msvcrt

_except_handler3

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 504KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 732B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ