1d1c4bb3ab22d954ada3ac165787d202 | Triage

Sharing

General

Target

1d1c4bb3ab22d954ada3ac165787d202
Size

3.3MB
MD5

1d1c4bb3ab22d954ada3ac165787d202
SHA1

2d5ded6c684d69e070af584a605526817f1c2990
SHA256

47b64c157297192f7b7bb9eb361344af9c245449a30d8d17d13eae9c51cad3ff
SHA512

2e7176571d749c7d6105475b85ad3f99523fc9747a31401728cae099cde074c137518ad154107c02187f93d241545e9c4eb514afa225838dae8b45aa42f5a56d
SSDEEP

98304:3zouAywwGsaII1AcnzKfpHTYbBRNcP8U:UOGXHKfZq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d1c4bb3ab22d954ada3ac165787d202

Files

1d1c4bb3ab22d954ada3ac165787d202
.exe windows:4 windows x86 arch:x86

9393f9e82fb41d500fbdebc5c283752c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

wsock32

WSACleanup

Sections

.text
Size: 3.3MB - Virtual size: 8.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE