c1bfea02f6e04660f6bb8de69559bb5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c1bfea02f6e04660f6bb8de69559bb5d
Size

4KB
MD5

c1bfea02f6e04660f6bb8de69559bb5d
SHA1

9bab36ae6d3d69d160b75969f8807481ce6c2c69
SHA256

bdfb04a72262e0f3daa14cc41ae99bfa232eb1c2158a8992ef6d74460b6c8f4f
SHA512

8bac246d24249cd173789e94d618a64c8f7412cbba731341a2c3b19dd40f44418d4aef2c57a6f6dca4f89fc08989bdf773b540f664cc94d99988183ccc8cd1c8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c1bfea02f6e04660f6bb8de69559bb5d

Files

c1bfea02f6e04660f6bb8de69559bb5d
.exe windows:4 windows x86 arch:x86

80e137dbd57e9295d8184a7d6c03bc24

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStdHandle
WriteConsoleA
Sleep
GetLocalTime

urlmon

URLDownloadToFileA

Sections

.text
Size: 512B - Virtual size: 144B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ