2704b97774e0257c01e936bd0e70e15c | Triage

Sharing

General

Target

2704b97774e0257c01e936bd0e70e15c
Size

1.0MB
MD5

2704b97774e0257c01e936bd0e70e15c
SHA1

8e758b6f8213edc4e4a11600e7af19e5735a9063
SHA256

e7d0f3066cbe5a3f78c117540d86fa85c4027bf45bd04a3778f13494d9a80d65
SHA512

a4240e451662a9bee209f534efb43a43ff327351d5ea1c26c87e1d5e5bc642bed0983de6d4aed42e7f0899004ff958dd37ba7877bfc246660b6341c4e18cc6ca
SSDEEP

24576:DPFBgOHXKKn9uUVz1Olrg+pibjaiVVbKv5Nnv30C:7FCO3L9u+OlFiXah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2704b97774e0257c01e936bd0e70e15c

Files

2704b97774e0257c01e936bd0e70e15c
.exe windows:4 windows x86 arch:x86

0b2f3a07a412e9f194b5ea3b29d45873

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteExA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

Sections

.RIF1
Size: 1.0MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE