e1fbd059df8cac9e93626140c6c2ba32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e1fbd059df8cac9e93626140c6c2ba32
Size

107KB
MD5

e1fbd059df8cac9e93626140c6c2ba32
SHA1

18f19a9e2a1b41ff0951e4dbbd4084da34296be8
SHA256

16d282a7ba91ce0e58bf5a661263f707e78e0b2810846d57a8b3f81b537bc994
SHA512

17fa4d7f331ba4ea6acfcaf361fb3d697f1aaef08c2711a58a8bcf4cd65aca683dfab62d6fb0704e19f31c1ce6d8065e1ebe3cfccda55ec39f04295b11844886
SSDEEP

3072:OLsHg6IHrV6s9S3V3jOo0n85vzNjS0AJDcyA:OLSaLVrUl3jOo0n/JYy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e1fbd059df8cac9e93626140c6c2ba32

Files

e1fbd059df8cac9e93626140c6c2ba32
.exe windows:4 windows x86 arch:x86

d513a3f34f0f475ce221e71f69e9bffc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

CoInstall
AsyncInstallDistributionUnit
URLOpenStreamA
IsLoggingEnabledA
GetClassFileOrMime
IsValidURL

gdi32

ResetDCW
StretchBlt
SetICMMode
SetRelAbs
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrRStrIW
SHAppBarMessage
SHFormatDrive

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE