1fa111dd8105602db1dd6de4aab8486bb58ed97bbc71bb435c8855ca4296a306 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1fa111dd8105602db1dd6de4aab8486bb58ed97bbc71bb435c8855ca4296a306
Size

13.1MB
MD5

4fe44d1a53cc3fdab9939d8b61a2df1f
SHA1

f787900b58f8169d3d247709685c65b07da33208
SHA256

1fa111dd8105602db1dd6de4aab8486bb58ed97bbc71bb435c8855ca4296a306
SHA512

51d617a9b3ef83b0e84e96e61c74bf4fb6faf617ce22ca8b8231966c59690b9eef6154f1f1a6bd70fd5075b12b94b779814588fd535368038c8b5655ba931c0f
SSDEEP

196608:qvQcf4WwfQY81Cv9oXFf0UANb0wkarMofS7VIdnzKTWsbwQ7vc0W3kclc10CJ+CR:qIcf4nfQeSKNbQ5ofme9WPs6CoXJ3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fa111dd8105602db1dd6de4aab8486bb58ed97bbc71bb435c8855ca4296a306

Files

1fa111dd8105602db1dd6de4aab8486bb58ed97bbc71bb435c8855ca4296a306
.exe windows:5 windows x86

688d0d4b9628a1fc03f54234674106e6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

imagehlp

MakeSureDirectoryPathExists

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameW

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

iphlpapi

GetAdaptersInfo

ntdll

strcspn

Sections

Size: 4.0MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE