1b440c0d31dcf41cb7a4960dcfc36f043602de18bb200670135b5fc783255cfd | Triage

Sharing

General

Target

1b440c0d31dcf41cb7a4960dcfc36f043602de18bb200670135b5fc783255cfd
Size

7KB
MD5

b751cf65de06779fd0d3951e05d21187
SHA1

eda4a6b0efb486259b1eb200d14f463ae09270ce
SHA256

1b440c0d31dcf41cb7a4960dcfc36f043602de18bb200670135b5fc783255cfd
SHA512

a54573e694fd333639759b3fcb7d76d1951c91e28b128e77aa5c1cfd27fd725c2c5950d18f93dd0621cf3cdef01b49bf8dd94355895fd36353fb83bb442b8814
SSDEEP

48:66ay5YVO3EVkApc2wp8hH1NZn5EquglQ067YbPW0MbABbgL3q9J5S2hmc:b3EVkApcX4Hiv0hbPFjq3qX5S2hV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b440c0d31dcf41cb7a4960dcfc36f043602de18bb200670135b5fc783255cfd

Files

1b440c0d31dcf41cb7a4960dcfc36f043602de18bb200670135b5fc783255cfd
.dll windows:1 windows x86 arch:x86

731b7e280add7ddd2d8bee2511c30cf5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStringsA
CloseHandle
GetSystemDirectoryA
OpenMutexA
RtlUnwind
WinExec

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
printf
raise
setbuf
sprintf
srand
strcpy

Exports

Exports

_LibMain@12

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84B - Virtual size: 84B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

.data
Size: 176B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 712B - Virtual size: 712B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 160B - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 72B - Virtual size: 72B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ