497f5587360c767cc89e37ad7ef9964d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

497f5587360c767cc89e37ad7ef9964d
Size

34KB
MD5

497f5587360c767cc89e37ad7ef9964d
SHA1

407ad3415975017a7824b61636be763d37edda76
SHA256

852359c561c6fc13f231786ae1f85418eec8c36b5448042fbde7294359cd6280
SHA512

ed2d3b1860eaa3c1632af28f0bb9219f88df819960bc113e4b787574693534100fbcd15ef4654539144e8308e44faa56c9b02c3a1f76f53c89f9bcecf638894f
SSDEEP

768:16Z4aLijIx/Uq82kQQdTDneQHraINUxpd4pfmCGi:1Da+jIx/UN2ZQdHnsxpapeM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
497f5587360c767cc89e37ad7ef9964d

Files

497f5587360c767cc89e37ad7ef9964d
.exe windows:4 windows x86 arch:x86

4b0db05bf684aa0907262888603bcafb

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

comctl32

ord17

user32

SendMessageA

gdi32

CreateSolidBrush

advapi32

RegCloseKey

ole32

CreateStreamOnHGlobal

oleaut32

OleLoadPicture

Sections

.text
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE