b1b230c69895924ed92369f1363d348e4a0af16bfd1fd5142cf0931890be20a6N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1b230c69895924ed92369f1363d348e4a0af16bfd1fd5142cf0931890be20a6N
Size

3KB
MD5

ef03aed1846866d49ec2228f5f54e150
SHA1

570b17f4d681664bb6b6a49f96d80cbdc38aa7a5
SHA256

b1b230c69895924ed92369f1363d348e4a0af16bfd1fd5142cf0931890be20a6
SHA512

a4a4d03cf7aad690741e468adffdf4970d90f82f6c5e623f55b536c492073189dd8e004500a9a476eebc36c196495853e462ca1a892c00a7be257f2bfa97a063

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1b230c69895924ed92369f1363d348e4a0af16bfd1fd5142cf0931890be20a6N

Files

b1b230c69895924ed92369f1363d348e4a0af16bfd1fd5142cf0931890be20a6N
.exe windows:4 windows x86 arch:x86

f35da0feaeb1ea3121dbe4b43d43d5fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntExA

kernel32.dll.

LoadLibraryA
Sleep

Sections

.text
Size: 1KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE