1221dd9dc5ab67b0d00f45cd3d14e5f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1221dd9dc5ab67b0d00f45cd3d14e5f8
Size

52KB
MD5

1221dd9dc5ab67b0d00f45cd3d14e5f8
SHA1

2a6fcfb49236e414abf96071813c9135fd7fcc75
SHA256

b4b8b155e5c7c7fad7bcc3890a3919c97d14b2e55a7eace2086b5de955c2b2d3
SHA512

028075f3d46f0aee516b10531e29608ecf820393f03a91da6bc308bd6b5dad527bdf3f38c3ace8fa5d4596ffd35a0722ffc01c3e8d15f133871930a2525d8872
SSDEEP

768:62TWEI5HFMJ3GNT5+XlfW9OlD2Tt1anyevjkpGKxOkwQEJWAEQgnc:1g52RGNT5+s92D2DGXbkEKgkwAAE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1221dd9dc5ab67b0d00f45cd3d14e5f8

Files

1221dd9dc5ab67b0d00f45cd3d14e5f8
.exe windows:4 windows x86 arch:x86

1900879c98b4a96d399d6ce626330c68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

urlmon

URLDownloadToFileA

shell32

ShellExecuteA

Sections

CODE
Size: 17KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE