1cb2c2e8c1713f8f3da3d2e0c92ca7dd0ef40f8f82f6067ead9f49e25d8adfed | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1cb2c2e8c1713f8f3da3d2e0c92ca7dd0ef40f8f82f6067ead9f49e25d8adfed
Size

120KB
MD5

385e6a667077acdb2fe258cf3fd75fad
SHA1

24535e3b48a1154bee57a99cadcd9b0d784ba624
SHA256

1cb2c2e8c1713f8f3da3d2e0c92ca7dd0ef40f8f82f6067ead9f49e25d8adfed
SHA512

eeb38554c573422be2491c466f6db6634c40e4e829477fbbe5edc02ec6579714881f25cb5ea580bab2ed2cc9ae411baaffcd9b6dae5c343e500f69e45d8efe70
SSDEEP

3072:L/Esn1PfsV+LBlkPHWpnnrlp4nAPOQtt4E+2WusO:L/E0fsV+LzkP2lrsOPWBO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1cb2c2e8c1713f8f3da3d2e0c92ca7dd0ef40f8f82f6067ead9f49e25d8adfed

Files

1cb2c2e8c1713f8f3da3d2e0c92ca7dd0ef40f8f82f6067ead9f49e25d8adfed
.dll windows:4 windows x86 arch:x86

0f44bf2b3b0b8d5ecae5689ff1d0e90d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTickCount
lstrcpyA
lstrcatA
lstrlenA
GetTempPathA
SetErrorMode

user32

wsprintfA

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ