4538dee05106c1e811a7f06b6fce50b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4538dee05106c1e811a7f06b6fce50b6
Size

181KB
MD5

4538dee05106c1e811a7f06b6fce50b6
SHA1

d0b9d497c80346b14db50f9efb4bf23858fcec2b
SHA256

39dbb01681eee793c42a79e9ea84ed29578b7ff195ac6710e74777ae23190a1a
SHA512

5058b84eb08c78fd52ae97e383f2887d6c185c1959ba9c5debf6d9200f47e6347027008b0d60a6ce15a4163c7d8283e7d9565f650f77109dec65878f27518c0b
SSDEEP

3072:pkw3d25ynJvbD5qPArv9/1HgCA15FZkMTpchkCQ5EwAHAIt1gAwVE/yCEJDsm:+w3Y5SJvAPKtHgCAYMcfQEwvkGTYyCTm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4538dee05106c1e811a7f06b6fce50b6

Files

4538dee05106c1e811a7f06b6fce50b6
.exe windows:4 windows x86 arch:x86

c87d79d4aedd2a5806b4f002839d0321

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

SHGetSpecialFolderLocation

Sections

CODE
Size: 172KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE