438741660a5a78c60df49ff5334d0b76 | Triage

Sharing

General

Target

438741660a5a78c60df49ff5334d0b76
Size

122KB
MD5

438741660a5a78c60df49ff5334d0b76
SHA1

f8f54c456a0353279bba60198c75e95fdb14b3ce
SHA256

cf2b6f8f0673e7bcbcca3e370c0847effae444105c324c89d6ae77b83a3d74c2
SHA512

880817695a438e83794532e82807023bc191e4338a2b268405f55d613e9898e50ae4e39958ff426574413bd812f184ba31c07e0381ead519b3a808452700d6d2
SSDEEP

1536:hDb4yZQb7a1hWRI06NIO+ZjJpES8IpdDdUtcrVibir24hI/btmfhU3c/Rxi:hDb4y2yOSIO+bQIpdDdx5Fywe36RI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
438741660a5a78c60df49ff5334d0b76

Files

438741660a5a78c60df49ff5334d0b76
.exe windows:1 windows x86 arch:x86

af2b08eaebc6e1001cd400ec20c56720

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

comctl32

ImageList_GetDragImage

wsock32

WSAStartup

wininet

InternetReadFile

Sections

pec1
Size: 103KB - Virtual size: 328KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE