202938417fdf4f1da36d9202a1c88383 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

202938417fdf4f1da36d9202a1c88383
Size

49KB
MD5

202938417fdf4f1da36d9202a1c88383
SHA1

d0d503dc7ea701bc03109c191526872e9ecc9925
SHA256

52f1bde821da5845487f3a6681309e93a3e163980519f8db7bb7026df43b31f0
SHA512

09af8e596b44c6867ff51c8346da9a87b3b94e12c6cf43e9956287b92e4edab058f589bded48a407b97876e8fa87088467b9120a1741fcbff1cafc3e919db389
SSDEEP

1536:IsObE/CldOJsmS1kez7FQfAJmivWSvGghdiDjk:io6ldOCgcZm8WSvGge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
202938417fdf4f1da36d9202a1c88383

Files

202938417fdf4f1da36d9202a1c88383
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 40KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE