44f6f8fddb61a2f175ed8f21059b48ef | Triage

Sharing

Copy URL Twitter E-mail

General

Target

44f6f8fddb61a2f175ed8f21059b48ef
Size

142KB
MD5

44f6f8fddb61a2f175ed8f21059b48ef
SHA1

ce0d426ee741109c99b828030a32266d8fa9e607
SHA256

8198bf5afef5839434b504f230f957ea81646dd697a5f3c6326d5a70883213b3
SHA512

ead49f56e2a1e9acfc7a417643bfcfc89e6b98270905edea67974dddd2ad5f2dabc01edec413b6fe33ad3c04612aa91ca16fea3dcd687a1b9254678cd77ec7d9
SSDEEP

3072:A2zIUEhULcGr24xkCclz7LElIajcqyROGrrq3MGdPeJ0tgo:A2whIcZwkrx74lljcnzrq3XteaD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
44f6f8fddb61a2f175ed8f21059b48ef

Files

44f6f8fddb61a2f175ed8f21059b48ef
.exe windows:4 windows x86 arch:x86

c52c879892e7bd011211b97c41001394

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

shell32

ShellExecuteA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 133KB - Virtual size: 384KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE