0d48cb131754cd2256a6f7eb58a88789 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0d48cb131754cd2256a6f7eb58a88789
Size

3.1MB
MD5

0d48cb131754cd2256a6f7eb58a88789
SHA1

96c41c34f619a9392f8b1359d182b36d49b8d333
SHA256

8ff817e3fa4ed39ff2d12bb590b0ce15f395bf5b8c451465063398dea0ce959b
SHA512

553f9526e82fd18e451d295ff72af50ac3f32bd569993e247659922ef9bcf3b417d3a5c6f9c64e365fa0c7151affffc82877778da9fa9d7380c975a4f787a0af
SSDEEP

98304:puHyuN65yhy+kjiwaE+TJcWn6M15xEhi446:puhNa+hWiwa9TuW6e5qZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d48cb131754cd2256a6f7eb58a88789

Files

0d48cb131754cd2256a6f7eb58a88789
.exe windows:4 windows x86 arch:x86

9393f9e82fb41d500fbdebc5c283752c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

URLDownloadToFileA

wininet

InternetGetConnectedState

wsock32

WSACleanup

Sections

.text
Size: 3.1MB - Virtual size: 8.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE