1d0c2cc599aa58cffa77cd078ca4b72ee5f2d42327e89853680fbb22474bda10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d0c2cc599aa58cffa77cd078ca4b72ee5f2d42327e89853680fbb22474bda10
Size

16KB
MD5

9dd7a237978dd13d24db48ae4916bccc
SHA1

86a76c42b3044639f7abec914e27da6265869eab
SHA256

1d0c2cc599aa58cffa77cd078ca4b72ee5f2d42327e89853680fbb22474bda10
SHA512

09121affae4763ab96733e1f191da0b5d83efae68f496b43d7a85902370fa91a46b3e35663d6b74513a2f9c5e333095fa8d1629a2a5fec9e532d983cd545f40e
SSDEEP

96:IGUORZmtBX/sQuZsff0W0eLIU/oM7WIFdYV0KieVPAj4OOqhOpOBOCO8ObOSkWO6:PnRorgsH/NIU/oAsIHVNtvhVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d0c2cc599aa58cffa77cd078ca4b72ee5f2d42327e89853680fbb22474bda10

Files

1d0c2cc599aa58cffa77cd078ca4b72ee5f2d42327e89853680fbb22474bda10
.dll .vbs windows:4 windows x86 arch:x86 polyglot

a783c2c5b33dffeef1cd8577b9f2b182

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

AddAtomA
CloseHandle
CreateProcessA
FindAtomA
GetAtomNameA
WaitForSingleObject

msvcrt

_sleep
__dllonexit
_errno
_iob
abort
exit
fclose
fflush
fopen
fprintf
free
malloc
memset

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 176B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ