1bf6d39ada60eb1d559929f406fa80ce | Triage

Sharing

General

Target

1bf6d39ada60eb1d559929f406fa80ce
Size

18KB
MD5

1bf6d39ada60eb1d559929f406fa80ce
SHA1

566cc99c241cb900f97b4039c54593e2ef3e7f89
SHA256

649dd7379b3b5a21044bdb7a6bc051b0a649dbfc67870cc4c6b68d9276982240
SHA512

cde89a52bc65e3cdf7c8ab086c4c805096cb79f8e7ab7f43aa23ea4a781ed2035eaa28ac4bbd03a5e82ba11000f65d754dfdeb5406724df2e2b9f779f5523b14
SSDEEP

384:SSlgQcaIoqpDgg7SUse81A6PyU6eDbkUHrWbS:2tg7Ua1A66ADbta2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bf6d39ada60eb1d559929f406fa80ce

Files

1bf6d39ada60eb1d559929f406fa80ce
.exe windows:4 windows x86 arch:x86

541160bce55bf5030f1053d9ca2f310b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

ExitProcess

Sections

.code
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE