2576b3b7be652a134add258b4a60618b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2576b3b7be652a134add258b4a60618b
Size

160KB
MD5

2576b3b7be652a134add258b4a60618b
SHA1

54042db6301221502e7a4dd9f499f10aae9e145a
SHA256

32a15a4c582a6b69028d40552099afdb409ab0372584bc54c1e342ad71cd7a83
SHA512

571d4b0832b229c739aa1843b48bf6b1fb097174edf50b16737ba36b646685d5b774900219293395632a28d329a2d0c1abc7d3080ca23a2e569633e7acc9c02e
SSDEEP

3072:cs6fME+UnCsh7x/J16TKuiBLr6SETLKSda6ddZCqKAAbdPJ+I1czO:cJMOnz71J1WKhV2SMLK+awRARx+0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2576b3b7be652a134add258b4a60618b

Files

2576b3b7be652a134add258b4a60618b
.exe windows:4 windows x86 arch:x86

74ba7de332d13cfac08687474a9e4412

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetACP
TlsSetValue
lstrlenW
Sleep

oleaut32

SysFreeString
GetErrorInfo
SafeArrayPtrOfIndex

advapi32

RegQueryValueExA
RegSetValueExA

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal
IsEqualGUID

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateZoneManager

wininet

InternetSetOptionA

shell32

ExtractIconA

comdlg32

GetOpenFileNameA

Sections

.text
Size: 24KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE