1d5c539096b94c6a09c2b99d7612260c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1d5c539096b94c6a09c2b99d7612260c
Size

166KB
MD5

1d5c539096b94c6a09c2b99d7612260c
SHA1

43c03c404eb40d41382b1871a0465b375e94dc2e
SHA256

6ed82db57e125a166914900db10cad69466663d99ec858ed2fd832761e9dc628
SHA512

4db9a967e1b64deb7ac9158c8953e70fa5b9acc03262dcaadbd42cd15d9721f615e04ff08a8670ec9950e6429ea7c5d02743a2d6fc33ff925713c8337d64d3d8
SSDEEP

3072:fe1y3eX7V1zlJVpoAx8L3rH8Iy/PlQJ5ISWoNwfH2JjjTKB5TSZkWTok:fe1y3S1xrqA8LmulZa4CB5pj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d5c539096b94c6a09c2b99d7612260c

Files

1d5c539096b94c6a09c2b99d7612260c
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 132KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE