0639b13cfa7bc8b21606fa78c410cbe2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0639b13cfa7bc8b21606fa78c410cbe2
Size

659KB
MD5

0639b13cfa7bc8b21606fa78c410cbe2
SHA1

3895f0fc43189120ef2c097e30242d60fd501ca6
SHA256

f66e5e561cadce16f47c698ac48a680ac8c6dd65fb1dc73837f7fbe079907037
SHA512

f287998dfd9aa1186a9ba51f8f763a28488d7bd4322e78b0170eabdb7365383428d0643b925d893f178bf8d4d12d4dc7923639407b7a1951384a8e7a2e4d228b
SSDEEP

12288:/47w/6QjTBjutEPFTMQKbabYKuf3QvJZt8RHirvSD+uLLgnbl:/qw/6kVdPFTNKbCHufAhZteHiLSxq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0639b13cfa7bc8b21606fa78c410cbe2

Files

0639b13cfa7bc8b21606fa78c410cbe2
.exe windows:4 windows x86 arch:x86

c926ecd9ed3b8bad2f94748e1819992d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

ole32

CoCreateGuid

Sections

CODE
Size: 623KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE