1dbf5ced048c37cbfb8e13958c722053 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1dbf5ced048c37cbfb8e13958c722053
Size

169KB
MD5

1dbf5ced048c37cbfb8e13958c722053
SHA1

1232328d779a44ca4eb1ff4cf987504a0ad7a3e0
SHA256

c1b04771b5018ebc3352344d2019852fc02d0ab06e361bf4aadf712438861616
SHA512

c63e0bd53703b050d2194e89f3d4ca548985fda2e88acd4ed61858af3d77900439fd34dcbd13a6afcd0da1f7e411fa57e19cdcd2afe01d6344da76612b6452af
SSDEEP

3072:0xs6HHmFs0zEISbPtVfBI06uQgTzWvtqQdQ1EJLXkfgjA7KvLGDS:0fHmjkbPtVJsZgvWvtqQdQULzjAigS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1dbf5ced048c37cbfb8e13958c722053

Files

1dbf5ced048c37cbfb8e13958c722053
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 136KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE