0155c112bd457767df8d59c3d3bf0621 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0155c112bd457767df8d59c3d3bf0621
Size

520KB
MD5

0155c112bd457767df8d59c3d3bf0621
SHA1

9022ebf6022d1367d8b6fd8f5934adb7aebd221b
SHA256

1ea0deb1c2a3c3cf938d9131913a2e39dd16a80d7256f1a6c607f1a66865763e
SHA512

43df0b42fe7e55f076afb21e279634c584ee8bfb27a2d9a243c7118fc5ecc46012254e32e0ec9dc9f9561ce9887e40acd47670fa9aa568a6ca1f5a2ccd51e1ab
SSDEEP

12288:M0LXXuq8eTzIWgxPfSHhJZFs5MtwlnrRB5c:M0LnN87WgNKHhJjqMtwlnNHc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0155c112bd457767df8d59c3d3bf0621

Files

0155c112bd457767df8d59c3d3bf0621
.exe windows:4 windows x86 arch:x86

75db00f55ff27cbfb4783cc404de85fb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetReadFile

login

mataprocesso

Sections

CODE
Size: 495KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE