1cb2773106b622f033cd0aedc2e52b00[.]bin | Triage

Sharing

General

Target

1cb2773106b622f033cd0aedc2e52b00.bin
Size

93KB
MD5

1cb2773106b622f033cd0aedc2e52b00
SHA1

55170944f990eedaeac8ae1905e97d10d468bc8f
SHA256

bbd6ef360df400f1c167fb4e7b541512888d77f28960e6a0bef4598857661bff
SHA512

9b9a4040a51ea91975116233ac2973ea04961a0a27e069c021aa9f7aaa31feb793a89e686af9dd7cf196c4dc0c6c1e318fb5dedf79037746e7ef343bf81cf75d
SSDEEP

1536:aL4NEoZ0uQdTc7OqErar+d3PCLuuuuuuuuuuuuuk3hXhhnvL2e:aM6oZ0uqiOqErare383hXzLh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cb2773106b622f033cd0aedc2e52b00.bin

Files

1cb2773106b622f033cd0aedc2e52b00.bin
.exe windows:4 windows x86 arch:x86

64bcf47d8080a3be42fbbaccfaabbf6b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceW
GlobalUnlock
LoadLibraryW
UnmapViewOfFile
CreateProcessA
GetCommandLineA
GetCurrentThreadId
PulseEvent
Sleep
GetCurrentDirectoryA
FindClose
LocalFree
SetLastError
GetModuleHandleA
lstrlenA
HeapCreate
CloseHandle
lstrcpyA
CreateFileW
GetComputerNameA

user32

CallWindowProcA
CheckRadioButton
CreateWindowExA
DrawMenuBar
DrawEdge
CreateIcon
IsWindow
GetDlgItem
GetCaretPos
FillRect
DispatchMessageA
GetDC
SetFocus

cryptui

CryptUIDlgSelectCA
CryptUIDlgCertMgr
CryptUIDlgSelectStoreA
WizardFree
LocalEnroll

appwiz.cpl

ConfigStartMenu

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE