1b2f230b810b6bd5547e36617c257719c7d3bd4901ec20db53883c2f23c10c20 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1b2f230b810b6bd5547e36617c257719c7d3bd4901ec20db53883c2f23c10c20
Size

146KB
MD5

8afbefc4fb6745eeb0e2e2160919e908
SHA1

ec3834a59ef0f2ed370fff5be01b2ab20473ac32
SHA256

1b2f230b810b6bd5547e36617c257719c7d3bd4901ec20db53883c2f23c10c20
SHA512

c8a5dc83d7e4065f994569dbce5da5a5609cc988507e43b62943102db5e44ac0274fae8f76cb73536754e0169e7e4d1d2d3b25efbd8a7d51d352d20d03851add
SSDEEP

3072:sgffN+WiBiwhZfZCx59VgdRHExWk343JcyYMwOKhqmL64F:jN+fB/Ix5Ee3WJbYMTKhGe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b2f230b810b6bd5547e36617c257719c7d3bd4901ec20db53883c2f23c10c20

Files

1b2f230b810b6bd5547e36617c257719c7d3bd4901ec20db53883c2f23c10c20
.exe windows:1 windows x86 arch:x86

47b4436dc860445b0991b17ce5079b5a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetModuleHandleA
GetProcAddress
CloseHandle
GetTickCount
RtlUnwind
GetLastError
GetModuleHandleW
CreateFileW
GetDriveTypeW

crtdll

__GetMainArgs
exit
raise
signal

advapi32

RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ntdll

RtlTimeToTimeFields
NtQueryInformationFile
RtlInitUnicodeString

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 40B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 952B - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 306B - Virtual size: 306B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ