130a755d6a432ecb2185494f7bb5673c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

130a755d6a432ecb2185494f7bb5673c
Size

3.5MB
MD5

130a755d6a432ecb2185494f7bb5673c
SHA1

2cb2a34022486d9cc68d7aa9dae1e1d8909a830b
SHA256

cedfe438f1fb2a5aa2a24622876bd3a87d823a6edd3dc083100d1403d09139a9
SHA512

ecfcea83f2c3fb0821dcaf75579cd3b94c9bc83071f658ceea55fa7654b48ef081ac92552c08c7e2f357447c671aa18be1601b69176268667e9bc817b9403750
SSDEEP

49152:/Stq0TRN3we26N5hQSqyTuxptwypvwIh36TvWwxYngwe/L/FqT4iS/NIuKyep7Ny:v03R54EuLtTIIhsXYnC/Le43BUUVr/a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
130a755d6a432ecb2185494f7bb5673c

Files

130a755d6a432ecb2185494f7bb5673c
.exe windows:4 windows x86 arch:x86

ce6c6f6f01e9d913e2427fb644a3dc45

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetSetOptionA

Sections

CODE
Size: 3.5MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE