1bdf58526cfb6f51ba88191a3a559307 | Triage

Sharing

General

Target

1bdf58526cfb6f51ba88191a3a559307
Size

180KB
MD5

1bdf58526cfb6f51ba88191a3a559307
SHA1

18a4e27c2a99497259ad43f5203218d44e3b145e
SHA256

55a33a6080aefd37fb5b89169959e09b82a92289633f1cfa891d8832c368d097
SHA512

760e71397ca4fa6a98eb39b35ad2f8a35ef7213b2a46ecab73a05c46b0d5b925b242e306b34df224ae75994b208138a13167f04a10437cdac11b87841e4a66c5
SSDEEP

3072:S1HjEGLDytGn7OaRs3jtN/uK2l+8C/Mw0jW+umk5NNWsTUKlBxMRdVjiD8xDo:S1HI2Dy8n7OVuHpON00NtUndegxD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bdf58526cfb6f51ba88191a3a559307

Files

1bdf58526cfb6f51ba88191a3a559307
.exe windows:5 windows x86 arch:x86

93e67fb762425018b764e917bdf116ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetMessageA
IsCharAlphaNumericA
GetDoubleClickTime
GetDesktopWindow

shlwapi

StrToIntA

kernel32

GetProcessHeap

Exports

Exports

?ForsakenQuantum@@YGKPAUHKEY__@@PAUHPALETTE__@@@Z

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.tron
Size: 512B - Virtual size: 200KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data5
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data4
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data3
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ