58b5ddb6901c34bb37e60ac157a060b3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

58b5ddb6901c34bb37e60ac157a060b3
Size

1.2MB
MD5

58b5ddb6901c34bb37e60ac157a060b3
SHA1

b4b2b61fb80a66a32c449284045ed5367be94b21
SHA256

eb01b1de09e4e46505e2c6f813b02d5d25576958fc86503bbec2152304d7cc80
SHA512

4421e69d65fc70be62d5a37cd79dfe60d055befb9f25fd025ca48525de0e4de4b8cad4fed91fca411c213e27d15a9ab638af3cb661e2a63ba8a1e2300e12bdc4
SSDEEP

24576:lw/637wMGRQbJu5ATRMnNsfaobuHC7bvdl1d+/t0K5Br8AFDGd/fxE7kV8uT:e/68NQbJ6vo77D1d+/TjHGdxG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
58b5ddb6901c34bb37e60ac157a060b3

Files

58b5ddb6901c34bb37e60ac157a060b3
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 1.2MB - Virtual size: 7.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE