109d365b27e0fe4a7b8712701f547c64 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

109d365b27e0fe4a7b8712701f547c64
Size

408KB
MD5

109d365b27e0fe4a7b8712701f547c64
SHA1

d9ded1c73e1ff728c116078a22c5dd15c8409c34
SHA256

dc09a108cfbd7632c9c06587cefe2b5aa9040cecad4c30155becf712b32ccb7c
SHA512

9c671e6e048621b53418a4dea30d58c1db019849607cebecc4eb39b47f0b1c32717a2035b5942f8538e3126f038901b29a34f1f2abaa8b9c9887c4ae830ca6e5
SSDEEP

12288:ktEdSp+1vK14YTUZVu/r3KWePMM/VeLWqO1X:kYSyc7wZVuDXJiSWqO1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109d365b27e0fe4a7b8712701f547c64

Files

109d365b27e0fe4a7b8712701f547c64
.exe windows:4 windows x86 arch:x86

25c3fe8bd11f874cf7921af06f453828

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemAlloc

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

ChooseColorA

winmm

waveOutGetNumDevs

Sections

CODE
Size: 377KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE