459c9f68fbc8e19b75be256ddf45a9b14a0d8b93ac1ec2e658fc57b5bc0a699b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

459c9f68fbc8e19b75be256ddf45a9b14a0d8b93ac1ec2e658fc57b5bc0a699b
Size

5.1MB
MD5

24baa77d956643b84aa1c4c899e4b730
SHA1

d5c55a31b2b05a44ca8a5b25a7af1da0b1578992
SHA256

459c9f68fbc8e19b75be256ddf45a9b14a0d8b93ac1ec2e658fc57b5bc0a699b
SHA512

5b156897fa180692e3f8a24892aa7ce2dd02b24bffa191beb094a3615ebb5d414f4c3545bf25ac7341dbe33a3d342d8d6173fd7293c5f9eaf73e6509d2d371de
SSDEEP

98304:AoHNZepsSVs2Z/oexNikDBqb+9y6z593NWvQW52ivHjOLM5yol+rQuRjPsN6M:AotZgs21BRLdoQlSOLM8gYQuGR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
459c9f68fbc8e19b75be256ddf45a9b14a0d8b93ac1ec2e658fc57b5bc0a699b

Files

459c9f68fbc8e19b75be256ddf45a9b14a0d8b93ac1ec2e658fc57b5bc0a699b
.exe windows x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.0MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE