2652a66ed4baa4fad66edb53bcbadd41 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2652a66ed4baa4fad66edb53bcbadd41
Size

145KB
MD5

2652a66ed4baa4fad66edb53bcbadd41
SHA1

74c9027619dca6df6a2cff6e5c8e3ae5fc1f3c71
SHA256

8c62e76c8bba1a2a3d25b75a0a727481b455a724447e49e1feab79892f28796e
SHA512

d855b10c24dcc0be1f11a8bf7317864653ff92058132f548bbdd49aa4855c33d2030f3a014dd237c63c6c3ed562538f5cd5ed607f7b05454b210452dcd6b123c
SSDEEP

3072:xJx59fI2DmvdgShtEvz7/eNwvmTL3gJGtTw19Y6PdSJQ:Lx/gQm2ShmvziPTLwJGtTwfYFJQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2652a66ed4baa4fad66edb53bcbadd41

Files

2652a66ed4baa4fad66edb53bcbadd41
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 133KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE