38dc76b849da058ae782d1f6791f8266 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

38dc76b849da058ae782d1f6791f8266
Size

75KB
MD5

38dc76b849da058ae782d1f6791f8266
SHA1

f19463e0ff2e21fea242d0f369534701ce38bcc0
SHA256

13612ee4398ba8bf792d6b1d6ea98341cc7b8bc613873b0a303e430a0fdab88c
SHA512

eb130bd28638cca7b11c368e00a90063c67af2b490e4c71f0ee08641647346365d780927f55c6599de6b9f26fbb799a962a7f9bb0ce6c9a78581679c89617d88
SSDEEP

768:s2u/cSSB5xPtot1+YOSvt4fzgAIA0+3l6jF/anhIA4uNMwqD/M6+Ymbrg9qZpobH:zXSSVI1cQmfzSc6jtanhIyxDrgMi6G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
38dc76b849da058ae782d1f6791f8266

Files

38dc76b849da058ae782d1f6791f8266
.exe windows:4 windows x86 arch:x86

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 46KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE