238e1a85738864d59179bb478205f995 | Triage

Sharing

General

Target

238e1a85738864d59179bb478205f995
Size

203KB
MD5

238e1a85738864d59179bb478205f995
SHA1

5dd4d602d06cb8a8c41bdb4fd0331496272cf7bf
SHA256

82907cc6da07046f7814393d471aa8ab5eebb72b5de1c574d7b7032ffd3e4867
SHA512

cc38f9634787c061b1a7afc72e35f5bcd65f0a7969346f0b0fca9b8dadfdbb5cbcc2582de7f7bff59bfac62409ca00a4215cce8da1159e8a744d535dedc4ca5d
SSDEEP

6144:WFbxKooUWc8lvsTqzKJKTjxlID9XAxp3TCCk:EqDc8lvsTiKEJlIDReIf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
238e1a85738864d59179bb478205f995

Files

238e1a85738864d59179bb478205f995
.exe windows:4 windows x86 arch:x86

2aeaf8b115db181ba2fdb7e3eaa952ea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

activeds

ADsEnumerateNext

Sections

CODE
Size: 189KB - Virtual size: 596KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE