002b01b0117ca0479936aae764a8d031 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

002b01b0117ca0479936aae764a8d031
Size

728KB
MD5

002b01b0117ca0479936aae764a8d031
SHA1

4850368a7642e242a78428125aa5f35a025540cf
SHA256

22e4c39f2308b95a641eea92d9d56edeec0550330d1103f94743018e52f9beb7
SHA512

5d2496462c54116e9804753a083c7cb9d651fc1f6cbae6c62dd2fb6d6013c9e5fe80b559d152f5ce32ea437f05eafe5d5d9743987d5021d66eb6af6451b1962e
SSDEEP

12288:nlGXUjvthxzIT5zLXxn7zOfbhDfglY9T/x1rjsk2VTFMzkIiF:ncXUjvt0TlN7YbhDKgT/x5sjhFOkI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
002b01b0117ca0479936aae764a8d031

Files

002b01b0117ca0479936aae764a8d031
.exe windows:4 windows x86 arch:x86

9a534007b6ea375ae5df7c5dc1a6c1ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 718KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE