142f7f0c7d403ba1b0680e0fdb674577 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

142f7f0c7d403ba1b0680e0fdb674577
Size

365KB
MD5

142f7f0c7d403ba1b0680e0fdb674577
SHA1

57cefb2fd424fa45ae71949a8cec20e30382ced4
SHA256

622ac8b083a3b0101b0c50f6f740c6562ebeb27b8af92331b97c96b7bba59893
SHA512

153c048a9d2595cfd547eb7d308fc2e155aaad5a64c49248c72e8ddc98fdead8ab98428d27166151e48b571c9735f758229378ffb1a22422fd9e3b65b7b94c0e
SSDEEP

3072:6Ns3xjzkodwZSidl5GKPkNbAyauSgweACTuZFPZaR2qY:CGeZS0XG6gbAyauSg1ACTqZbqY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
142f7f0c7d403ba1b0680e0fdb674577

Files

142f7f0c7d403ba1b0680e0fdb674577
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 148KB - Virtual size: 376KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE