1bed12bce45c4103bea38a88e3e03eb8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bed12bce45c4103bea38a88e3e03eb8
Size

35KB
MD5

1bed12bce45c4103bea38a88e3e03eb8
SHA1

ee1d6c80374f7d0c456a18abb8d064c920ff6f7d
SHA256

0a8458f0feca8969c1b9ee80df2079fc6b8290bb736bac1359dd60e1974e34a3
SHA512

2b83d18762b978ddc1773df1a6698a6a5ff7d2a1cc3f27c9ec6d92bf0618771fdc17b4b816c463bab2dee1bd4d837165cde9b9cfa22b7a26f0b90152673da4d6
SSDEEP

768:AhKovKouJhJgkkC0sf42n7xp6qbTZ+zi33wpbFXz:cKovxutg/C9fjiNVpBXz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bed12bce45c4103bea38a88e3e03eb8

Files

1bed12bce45c4103bea38a88e3e03eb8
.dll windows:4 windows x86 arch:x86

37bca63acb6587dfb1eaab9915446388

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

LocalCompact
LocalLock
lstrlen
ExpandEnvironmentStringsA
FormatMessageA
HeapLock
GetModuleHandleW
SetEnvironmentVariableA
lstrcmpi
HeapCompact
HeapReAlloc
HeapCreate
ReleaseSemaphore
HeapAlloc
LocalReAlloc
ReleaseMutex
HeapReAlloc
SetEnvironmentVariableA
LeaveCriticalSection
ReleaseSemaphore
lstrcatW
HeapLock
ExpandEnvironmentStringsA

user32

BeginPaint
ReleaseDC
wvsprintfA
EndDialog
LoadBitmapA
DrawAnimatedRects
UpdateWindow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 731B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ