1b01fd33c9aa6d3cade790e1659bdf1de7c4ee16c48b276450d7c1c5edc7e2df | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b01fd33c9aa6d3cade790e1659bdf1de7c4ee16c48b276450d7c1c5edc7e2df
Size

264KB
MD5

520dd04461076ed877c8e4bf9c532151
SHA1

f5e20be012c525947cc306c3dd40b7de0d5354b0
SHA256

1b01fd33c9aa6d3cade790e1659bdf1de7c4ee16c48b276450d7c1c5edc7e2df
SHA512

190dd8be79985e11d5063a9afcc312a02f1a9190038fdfbeaa1546d33d1dd0d71a47557032051ca0f387bc457ce060b1b006761ca870c9f7f6b61d0da3973346
SSDEEP

6144:flzoa7yNgAIQo8OLamr3RLzRnHhq92gkqnC2f:ftB7yNgD83m3fE92TqC2f

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b01fd33c9aa6d3cade790e1659bdf1de7c4ee16c48b276450d7c1c5edc7e2df

Files

1b01fd33c9aa6d3cade790e1659bdf1de7c4ee16c48b276450d7c1c5edc7e2df
.exe windows:5 windows x86 arch:x86

b40c457657c59e9d515f1130618a2f1e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
CreateFileA
GetTickCount
GetModuleHandleA
GetCommandLineA
GetProcAddress
GetStartupInfoA
ExitProcess

user32

GetSystemMetrics
LoadBitmapA
GetMessageA
LoadIconA
LoadMenuA
PostQuitMessage
RegisterClassExA
ReleaseDC
SetMenu
ShowWindow
TranslateMessage
UpdateWindow
LoadIconW
GetDC
EndPaint
DispatchMessageA
DefWindowProcA
CreateWindowExA
BeginPaint
LoadCursorA

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
BitBlt

advapi32

RegOpenKeyA

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 280B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ