2a59e8fd859fd64608e6877172870dba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a59e8fd859fd64608e6877172870dba
Size

188KB
MD5

2a59e8fd859fd64608e6877172870dba
SHA1

c5342ffc641875a403596abfe7a2c5e847181424
SHA256

9b042d05b73e600d8014374dc85fd33b8acd6228e0564fd74c71b39c6b8ba4e8
SHA512

1d7e1c4f1a2ae420841e6f9b88a3008a171d00a942c798847ec17deabc4819607aa462f6d0a41a8822012d89816a1afe3a77ddf58c4bd64e0025241d106a5f6d
SSDEEP

3072:pSRSylGD8/5rowHl9M5F63UV0ZHXU74lQOgdDCEcagMsBtopG:pxylGyll2503jHXuOgd/p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a59e8fd859fd64608e6877172870dba

Files

2a59e8fd859fd64608e6877172870dba
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 157KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE