1eba93412d726c87aa094a3c44d9268a[.]exe | Triage

Sharing

General

Target

1eba93412d726c87aa094a3c44d9268a.exe
Size

176KB
MD5

1eba93412d726c87aa094a3c44d9268a
SHA1

f3ff7dd4573fdbcb2825a7fcad934b5c5235b431
SHA256

e66efbe405be933bb8a27d4b4beb8632bf395cb810ebd2f56b915edbee619a37
SHA512

d8e8b325b5869c75356de1e012daf440e8ffbf23b038a40cf97fdf84ce12a18854d720c4a2aa2a0074ef06b2d1c5015460588670127c1bf1419e2b23b71d0246
SSDEEP

3072:upMlNPPG3GRfo8RKjhzGBqOYcYZlDd8FdymUvuFWVAsiLYmFsL5+/aGw8R2KGU:upYNOWRg8UtGbY/iFdLUvuFuBoRGW2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1eba93412d726c87aa094a3c44d9268a.exe

Files

1eba93412d726c87aa094a3c44d9268a.exe
.exe windows:4 windows x86 arch:x86

aa64a63959d63dd286a1416a17d0347e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleacc

LresultFromObject
CreateStdAccessibleObject

shlwapi

PathFileExistsA
PathFileExistsW
StrStrIW

ole32

CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID

kernel32

LoadLibraryExW
lstrcpynW
GetCalendarInfoW
LoadLibraryW
GetStdHandle
GetModuleHandleA
CloseHandle
SystemTimeToFileTime
HeapDestroy
LockResource
WriteFile
HeapAlloc
EnumResourceNamesA
LeaveCriticalSection
FindFirstFileW
SizeofResource
FindResourceExA
GetProcessHeap
GetVersionExA
LoadResource
GetSystemTime
HeapFree
FindResourceA
CreateFileW
TerminateProcess

Sections

.text
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ