39c81cb0ebfc81c6efa318f7079e8644 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39c81cb0ebfc81c6efa318f7079e8644
Size

1.8MB
MD5

39c81cb0ebfc81c6efa318f7079e8644
SHA1

dad0ce09493208e3c30334e114b800e9d6a7e3fb
SHA256

33db7aae3c7544807696487fabd36651b50f5ec68f1b26b4197ffaa821fbb0aa
SHA512

cef878893a6c27593c0a3a962433ef89a350ec18e35e3cc34044921d377f68166798277141d81664abfa83c358be6f73598d64d985a9393b718cbf865cd1601c
SSDEEP

49152:oAbOM2REPu154FQJk2L6BnnfS+L5fUCdg6RwrhXB:KMGV1CgeBnbXdgwm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39c81cb0ebfc81c6efa318f7079e8644

Files

39c81cb0ebfc81c6efa318f7079e8644
.exe windows:4 windows x86 arch:x86

6e2a38db747b3e891b3e83115f3105a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

msimg32

GradientFill

gdi32

UnrealizeObject

version

VerQueryValueA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

urlmon

CoInternetCreateZoneManager

wininet

FindNextUrlCacheEntryExA

shell32

ExtractIconA

winmm

timeGetTime

Sections

.text
Size: 1.8MB - Virtual size: 14.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE