1bb0ffdb3763469a05ef180d753626fa | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bb0ffdb3763469a05ef180d753626fa
Size

64KB
MD5

1bb0ffdb3763469a05ef180d753626fa
SHA1

10c1066acc4a2d239b874ab1575fd960c7f9c41c
SHA256

c4e8350c7e46055994b1770347372eed3732369128e34724e09302e4afd5b5df
SHA512

4b82f816523d397bccc9bf016ba7579cb648a0a6e93e134a08232419e729c85bee2ec233d07c559f44bb1b40f3ee315af3a300ce7412e21e5bea25b390d41574
SSDEEP

1536:Qccc1UMxjUQKpxJmY/pQOQZjdMDdG88ckYM244Vnvln6j2DR:iMNUQKp62kjd8vkYMEVnvln6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bb0ffdb3763469a05ef180d753626fa

Files

1bb0ffdb3763469a05ef180d753626fa
.exe windows:4 windows x86 arch:x86

ffee42e5a0a117def0de5cae0f06e443

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCalendarInfoA
BuildCommDCBA
CreateFileA
GetProcessWorkingSetSize
CreateHardLinkA
DelayLoadFailureHook
lstrcpynA
RegisterConsoleIME
CreateDirectoryExA
ReadFileEx
ReadFile
HeapSize

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE