53b38de698259ec99ebcc3ec305f10c3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

53b38de698259ec99ebcc3ec305f10c3
Size

163KB
MD5

53b38de698259ec99ebcc3ec305f10c3
SHA1

76be6dc1a8199bd4e6af026ae5f25fb3231333ba
SHA256

73ef141cca486f70d963acd5cefa45b7b81c022390b411a444851a0ad0f535ae
SHA512

e8c5db4ebc4d54cbae8072309ba284a6a2b43b39e1e62fb976ad1553eccdae2b71d36f06654b080b29d16c43d79c10bbb7c3ca11a7a5d4fbff444c4ccf3842f2
SSDEEP

3072:85WYsilyW0GE0CxcqN5fSIPj7pLKbPerCVu2bdVBccUKkmyz3c4WWdN1f9j:85WYkGzCyqbfnpLKbPRgGdXccEmyzs4N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53b38de698259ec99ebcc3ec305f10c3

Files

53b38de698259ec99ebcc3ec305f10c3
.exe windows:4 windows x86 arch:x86

41507753530d76bf751bd1509806ec8e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

Sections

CODE
Size: 157KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE