b1feb4a9039d230cc1907bb6d79a653a489f27ad0fd8b64fcca749a07b240f60 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1feb4a9039d230cc1907bb6d79a653a489f27ad0fd8b64fcca749a07b240f60
Size

5.5MB
MD5

970a7b8b1ed78b560b256a44fc52eaa5
SHA1

824c8af5db6759b7abf4023f28c94b4793e5bb58
SHA256

b1feb4a9039d230cc1907bb6d79a653a489f27ad0fd8b64fcca749a07b240f60
SHA512

cd37960f84f4b6a8a0125b752f59dc43c11e0cefcc95009a9dbb6701ea67020cc65a8d918d935bd098caaea2c3090bcd40d7894be633aaed59cc701991bdc96c
SSDEEP

98304:Gtti6lklfOVFC1ZhCjIcOzk8QI1pzJ/ch5Qa029VDhIoJ1cWvX9G:Gt3m1ZqIcOATI1p5ch5L027yoc+9G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1feb4a9039d230cc1907bb6d79a653a489f27ad0fd8b64fcca749a07b240f60

Files

b1feb4a9039d230cc1907bb6d79a653a489f27ad0fd8b64fcca749a07b240f60
.exe windows:5 windows x86 arch:x86

001cedc5baae214561e6afa8fe80c2ff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

DefWindowProcA
CharUpperBuffW

gdi32

GetStockObject

Sections

.text
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 934B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lL{
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.htext
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.`Qg
Size: - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s#=
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.g D
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ