178a0fce3476fe3cc188f5a8b2a110c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

178a0fce3476fe3cc188f5a8b2a110c4
Size

132KB
MD5

178a0fce3476fe3cc188f5a8b2a110c4
SHA1

cc0db7ef9eedea123b873b3bfb221ae195476eb8
SHA256

20d6265bd8c12dfe441f630c6c164b4694dce2d7f7605266b0342d6b1019dfeb
SHA512

72fe047c99d4d5a5e0f88062873c8ecb541290d6dd0bf340831e7b69a8fa249c2061009832e3b940cb884f59a438db8e68dea2d6a65a03fd408cd34249593e0a
SSDEEP

3072:kxDzVq20VTuuOX2as6RWXL/tJRMtRTM4Ls:2/wyzX46RWXLVJRsXLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
178a0fce3476fe3cc188f5a8b2a110c4

Files

178a0fce3476fe3cc188f5a8b2a110c4
.exe windows:4 windows x86 arch:x86

dc1c3237df6344d7d429b31268052112

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

SetSoftwareUpdateAdvertisementState
DllUnregisterServer
FaultInIEFeature
IsValidURL
Extract

shell32

DoEnvironmentSubstW
DuplicateIcon
RealShellExecuteW
Options_RunDLLW
Control_RunDLLA
SHFileOperationA

Sections

.text
Size: 89KB - Virtual size: 91KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE