0b58e3f865a445cf3451a475eb2be522 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b58e3f865a445cf3451a475eb2be522
Size

44KB
MD5

0b58e3f865a445cf3451a475eb2be522
SHA1

209c8d896bc694f2bdd56756ce485156cee96e1c
SHA256

feb8f84d4673b74ee0fa4fe8d7af57f42f484ba11b0445171149944536a661a3
SHA512

569c9a7ce7b4bd085fcadac0bb3283254ab26b61fefe2dcc3c4e55a3ddd5ed8420958e48ac68ef45e6e8cae5b8e5af2040f00dec8141eb81f3cf0d7420bd1d5b
SSDEEP

768:uwVJm2JJf4WONNht8SvDN0jWF/uA6Sd6OkeM6ZMuAuo9v3uYpjGJWAE8:uw7mYwvtXmWXxD6/IyAE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b58e3f865a445cf3451a475eb2be522

Files

0b58e3f865a445cf3451a475eb2be522
.exe windows:4 windows x86 arch:x86

cfef8918eb06fe9cd292b786655a4658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

Sections

CODE
Size: 35KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE