0560d7719aa4237094b625fd98938d80 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0560d7719aa4237094b625fd98938d80
Size

382KB
MD5

0560d7719aa4237094b625fd98938d80
SHA1

6c3d6d1f39cfbe162aa712d558092b4c55c4da37
SHA256

c25852d9750ef94b5dd04bc528ec7dd6a0b08ad3f978d0d7f41064f21637fbb5
SHA512

1698ac4eb9f396f7f461c36149df2ed26522a9448ecd874d5b5dca123950694a39ba977f8f5d47944eeb9c5036d8053e508a2002f663211ab8ba883d4cfc0cbf
SSDEEP

6144:g/hAZQdnILl8Oj0bZqnaBrd2oTNmFt9F8X5j92DTt6EIbEEVtBYLN5CKO3e+Wxca:gZOQJILlZU0a+oTuGJj2KbtBYLDCTu+g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0560d7719aa4237094b625fd98938d80

Files

0560d7719aa4237094b625fd98938d80
.exe windows:4 windows x86 arch:x86

c42bf4107481f4960a34f220d5944482

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

Sections

CODE
Size: 375KB - Virtual size: 724KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE