ab339e1c2a6f590e819503e14b5ff10c2d388d7423978a43fa1e887b25ffe746 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab339e1c2a6f590e819503e14b5ff10c2d388d7423978a43fa1e887b25ffe746
Size

3.6MB
MD5

9315427fe664dd00b207d2db521efcf3
SHA1

dca3f3c26fca8d72898ff077bd614e6946d1f988
SHA256

ab339e1c2a6f590e819503e14b5ff10c2d388d7423978a43fa1e887b25ffe746
SHA512

1daa84eaf9fa6df87ff9dbe2b2c7e4528009d39c8032b536db9dd776182fd4731869ee95330b30afc617261987421f6eab4ad3aa091f26ca12796730a1b7ca6b
SSDEEP

98304:2v38KHTtl5UA2Gp965Y8cNjAdqKCN2xnLkU3OsSP4H:2v38+zjr3/8clAdqKCExLkQOsSP4H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab339e1c2a6f590e819503e14b5ff10c2d388d7423978a43fa1e887b25ffe746

Files

ab339e1c2a6f590e819503e14b5ff10c2d388d7423978a43fa1e887b25ffe746
.exe windows x86

1071d25e865167bfbaacc862c08d607c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

cbent

YunXing

Sections

CODE
Size: 139KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE