2661ed0051eb48518fe9318ff59f7608 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2661ed0051eb48518fe9318ff59f7608
Size

242KB
MD5

2661ed0051eb48518fe9318ff59f7608
SHA1

b08205313092297ce0d3ead5be228c0f34a588c5
SHA256

45db6aee0238e258d0813e91c586bc766febb46812ba467f78c049e71252c4df
SHA512

4a5d69f14648264d55c903a22852e2ec937c52bc9f862b331d0bfb4997e2d42ad942280d32f9fc87d8834936cbafc2323289a1e65e60f3e8e0ee3d752a8c28c8
SSDEEP

6144:fzPrv/MsFsptD4P8JziLGO+pKYsY7bIxu:fzTvUsgHJziLGO+pKE4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2661ed0051eb48518fe9318ff59f7608

Files

2661ed0051eb48518fe9318ff59f7608
.exe windows:4 windows x86 arch:x86

cef24a7a01a111d6c0120067604fe47f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 208KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE