4228ddfa353a1c4143272b7fd9e4e509 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4228ddfa353a1c4143272b7fd9e4e509
Size

3.3MB
MD5

4228ddfa353a1c4143272b7fd9e4e509
SHA1

ed5035f7caaafc77007cf0453a1f62d3224d4506
SHA256

161fc69e91857d4743a3ab9146fc02793067346c4d705b00746efe907677990d
SHA512

eb29bd28157ffd4acbaebd279d308982b6dd4958d537852aff32a9b169aa530fea182a2ee9567f5fea938977e37e7787d32c1b364fdbff68ec8a5606a83e99d3
SSDEEP

98304:WXyVvF7gH6QmHGfX8svj1oN8v5TUjgLBbYGs:WWvF7gH6JmtWNg5gCB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4228ddfa353a1c4143272b7fd9e4e509

Files

4228ddfa353a1c4143272b7fd9e4e509
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 3.3MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE