641e3e2766959b306fc1265e1c885ba90252866398dd7a4da6f69f242af05128 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

641e3e2766959b306fc1265e1c885ba90252866398dd7a4da6f69f242af05128
Size

14.3MB
MD5

ba71c0ba4ca8f24b1c9d68a000e74743
SHA1

4654cbda0ffbaf35a989aff669f97722ee20e119
SHA256

641e3e2766959b306fc1265e1c885ba90252866398dd7a4da6f69f242af05128
SHA512

d1a405d28ad347c4e2992dcd60825f98b14ce4ffadca60967795f1520676d095a4a8ca7c4179c1dd9d8c91153a7ce8bb84e9b04e40dec4bd185c0651b6c6ade3
SSDEEP

393216:lVokwWR/VicS+8W2S8LuLcFREZTHsPmP3GXChwkf5o4U1Q4M6X:Xv1S+8W2S8LuoFmaPg2XC6+Ga4Mq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
641e3e2766959b306fc1265e1c885ba90252866398dd7a4da6f69f242af05128

Files

641e3e2766959b306fc1265e1c885ba90252866398dd7a4da6f69f242af05128
.exe windows x86

397865c786c4c8766a601cbd893174f5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

.text
Size: 1.1MB - Virtual size: 26.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE