04974401f4457316062be23b92351e0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

04974401f4457316062be23b92351e0e
Size

273KB
MD5

04974401f4457316062be23b92351e0e
SHA1

5e6814fa5a3813661e8f9a767683b15498552d73
SHA256

e5336708c6a2294c5e3b07440c819792972511667b746b6a7469decc2f8744af
SHA512

59e9d595374d78d7b0ab461565c7b1a7857f5ef71ecb80600f5b0473180a9d9e5ec9ff19a3632fccca927fbd7064dedecea4e55110c2ee452c0554b67e508d39
SSDEEP

6144:8kihHE1k5pBJ3uOYfN2ZracsshcfXnULBARPeQ+V81xWr3os:8pHEm5DY3M8ipLBgPeZC4rN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04974401f4457316062be23b92351e0e

Files

04974401f4457316062be23b92351e0e
.exe windows:4 windows x86 arch:x86

fb7244e08b464af53f8cfc18d60f60c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 247KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE