c60e924ea542ab243becf962aca704dc8584bffd98879eccfbfa7141b38eedda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c60e924ea542ab243becf962aca704dc8584bffd98879eccfbfa7141b38eedda
Size

4.5MB
MD5

45ab49073f9be181e2c908c16c17322d
SHA1

7c0b1853ae53acbd0f6f31bb5e38d2693c5bf05d
SHA256

c60e924ea542ab243becf962aca704dc8584bffd98879eccfbfa7141b38eedda
SHA512

c86c4b09e82f7b194a89b6cad8c2a60fba041d770cc1333fd3cec0a534f612aafd6c3e7f49847ed00e2d2619aac80af3d1d51094ac05e2e5f78eefff6a8f1a7f
SSDEEP

98304:Z/2GE0IrZV+0XrrADRt0PusvbK8+zMSxtRNjtklqdc1pC98:kssbPIviuqbKVNLjTG1pC9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c60e924ea542ab243becf962aca704dc8584bffd98879eccfbfa7141b38eedda

Files

c60e924ea542ab243becf962aca704dc8584bffd98879eccfbfa7141b38eedda
.exe windows x86

e813c0d97b234c5ff0d2655a6651c575

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

InitializeFlatSB

imm32

ImmSetCompositionWindow

winspool.drv

OpenPrinterA

shell32

Shell_NotifyIconA

wininet

HttpSendRequestExA

urlmon

URLDownloadToFileA

comdlg32

PageSetupDlgA

wsock32

WSACleanup

iphlpapi

GetAdaptersInfo

oledlg

OleUIObjectPropertiesA

avicap32

capCreateCaptureWindowA

winmm

sndPlaySoundA

Sections

CODE
Size: 4.4MB - Virtual size: 29.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE