04504f2d8f7b432b176195ff4035084f | Triage

Sharing

General

Target

04504f2d8f7b432b176195ff4035084f
Size

1.4MB
MD5

04504f2d8f7b432b176195ff4035084f
SHA1

c828ccf91532b312c070363f3fbcdddc21c04cd1
SHA256

5c155a2f7be89c91a6529222abd447dac6072eee4ef511ddba2df93e7d711ada
SHA512

117a314b6850f56b4546c93e20368d2a6034538fc2734d7d57eb8455a007d6eb08398e1fc68988e7dbf4986a069cff42bcee073008c2e5800483ef2523dc8912
SSDEEP

24576:yb5Eie3VHTtEhibbDncSYhUbHZB8Cfl8dbbWMnQdvpsRnVDZgjG:yb55e3VH9jncNO5B8Cf6bWfxiLaa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04504f2d8f7b432b176195ff4035084f

Files

04504f2d8f7b432b176195ff4035084f
.exe windows:4 windows x86 arch:x86

bf37b27f1e630061a1a370b39ea6c343

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 1.4MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE