1cbe6a07e01331f2bd216801c5df0860 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cbe6a07e01331f2bd216801c5df0860
Size

15KB
MD5

1cbe6a07e01331f2bd216801c5df0860
SHA1

c025291aeff7a3fc733f4d2087ec82df66213fba
SHA256

ca84c3bf51e443edfbbe237abc0a9ecafb2e7178d34540ff1efd8c1c6ab0ffdb
SHA512

a08179032bfd6a41fbe74bd499e0f4ab3b61dd97dbfd7ba1dd6e3586c06b81b651b3406af644fae2b9937b48acb03334e95815d16d25071ad982e08de32e8573
SSDEEP

384:BPoJEz/FZv8iwiHMYjoa302YTzzqTPmrJYMo8DAof:J/L8iHDj502MyT+YMoMHf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cbe6a07e01331f2bd216801c5df0860

Files

1cbe6a07e01331f2bd216801c5df0860
.exe windows:4 windows x86 arch:x86

5b41b7b81a8e1100944f02694ee2cb6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ReleaseDC
MessageBoxA
FindWindowA
wsprintfA

kernel32

GetModuleHandleA
lstrcpyA
lstrcmpiA
lstrcatA
WriteFile
CloseHandle
CreateFileA
CreateProcessA
DeleteFileA
ExitProcess
FindResourceA
GetLastError
GetModuleFileNameA
GetStartupInfoA
GetTempPathA
LoadResource
LockResource
RtlZeroMemory
SetLastError
SizeofResource
TerminateProcess

Sections

.text
Size: 1024B - Virtual size: 714B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 966B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ