1d3d3996b341f60722d11fc3441abb77 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d3d3996b341f60722d11fc3441abb77
Size

2.4MB
MD5

1d3d3996b341f60722d11fc3441abb77
SHA1

c0ca8fa6b7806124bb6c9204d32a350a775099dd
SHA256

e27817491f5cc96203fc925fb9756cc0671748188c388a3b6991e59b23d78d62
SHA512

42375219e75bfe255f513ead4b38dc7e5efbf8ef42e1a8802c64f48c1eed0627b1c9e6b7bde23ff15324d3b75871a3d430fbe3e9ef0edbf734cf9e17c9255d69
SSDEEP

49152:Aymi8K4vdzNPFUM6QJTL09Kyih7XunTPoZZ1R6ssm+MNbKf4Bpq7x:9mi85qM6Qpw9KBWzeq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d3d3996b341f60722d11fc3441abb77

Files

1d3d3996b341f60722d11fc3441abb77
.exe windows:4 windows x86 arch:x86

b6ffb9014d502d1650226318aef9871f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 2.4MB - Virtual size: 16.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE