c1bd8f13f310055b708092a90acc7a58 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1bd8f13f310055b708092a90acc7a58
Size

17KB
MD5

c1bd8f13f310055b708092a90acc7a58
SHA1

103946d6912ced856b77607be4f0fc93a5d1d486
SHA256

ce8f9790f5a8bd2830a2b712c09755363146981ba2ba63d6370382025ae5d094
SHA512

a75a00b150cb4bc27a183eb421ebef3e6e33b7d9b8f03b9e524c2b01f6f1a1d89301db615836850f1bbafcaff5c09f0d87611b9fca6a9cef6af9bda67fbadc9a
SSDEEP

96:2TAWnX4ZnVcTL12SjOrLirD9YQHfBoJQGKOQVbCB5rzvdWrQ:KAgIETLAS6r+D9YcfBM+9VbCB7eQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1bd8f13f310055b708092a90acc7a58

Files

c1bd8f13f310055b708092a90acc7a58
.exe windows:4 windows x86 arch:x86

c162473f2b23a9ebcac3fd8a0fcf7b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetDCEx

kernel32

CreateThread
ExitProcess
GetLastError
GetTickCount
Sleep
WaitForSingleObject

gdi32

EnumFontsA

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 384B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ