630b08a2e95f83056bd5c93177f7b52f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

630b08a2e95f83056bd5c93177f7b52f
Size

483KB
MD5

630b08a2e95f83056bd5c93177f7b52f
SHA1

99f1178838667d3bcd06176ffdf6288b2e8e64a9
SHA256

c6ec2ccdc07aa6637992ff197a7834d10e77bb6a34433be8975e7cfe9785d5cc
SHA512

68b5116d4bfe10798f9633216f55a26ecbd04c8bfb4f198b335b9fc0eeb6f825014a91302eae0724fcd6974666c272cc31bbcd0d17d3eccebeac1b9ab2f15be2
SSDEEP

12288:vNuMO/FEFScd00iYF6tqSoCyhP+LoSmsRQ:vQMO/4dUjtqNCoP+LJX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
630b08a2e95f83056bd5c93177f7b52f

Files

630b08a2e95f83056bd5c93177f7b52f
.exe windows:4 windows x86 arch:x86

1830c8b2b50e29953719e2f0dd95c489

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHFileOperationA

comdlg32

GetOpenFileNameA

netapi32

Netbios

Sections

CODE
Size: 448KB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE