0578107fa6daa8587a9404fb98b11ecb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0578107fa6daa8587a9404fb98b11ecb
Size

159KB
MD5

0578107fa6daa8587a9404fb98b11ecb
SHA1

2555f58e6b16d01dd9945bc3affdcaca3890ccb4
SHA256

4ffac5900508ca67dcdd69cd55308acc283c2e8bee01f2e0bbb01978d8341453
SHA512

faa184548b64ad022d02de74398de4bfed82682266d08aeb2ab1b90c8c63419bfa90bf785e1ce1759dfcace4642b535a58e82363904ca69ad274eb5c90cf6dff
SSDEEP

3072:m3FjBzarMWPz4UuFYwCEtUGbtMpNwVrBZa2w/eGlFYZ5:c84UsYUttMOB15

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0578107fa6daa8587a9404fb98b11ecb

Files

0578107fa6daa8587a9404fb98b11ecb
.exe windows:4 windows x86 arch:x86

397865c786c4c8766a601cbd893174f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

.text
Size: 147KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE