4790abeae063e1891ed3e0dfa7e417b6 | Triage

Sharing

General

Target

4790abeae063e1891ed3e0dfa7e417b6
Size

166KB
MD5

4790abeae063e1891ed3e0dfa7e417b6
SHA1

5953db53d07ea653ad6099c452804eda558ea984
SHA256

4e4f42008ed8d789e17634618d6253726bde840f0d522fa874a0b5afe6528f9f
SHA512

a0254182fae9d6bf39ef6f2c59e9b144c5e638dc55d6f648484c7678821ff9dbf5dbe90ee2a55bfa46e1e287fee4c8cff4e28d9d9ba8106252393a77f396e997
SSDEEP

3072:tixKQD5lBNSFD/zSpOHmxGKaL/kiUVzPekry7iOSJlaMZhx3N9R1/dUV2R:tGKs5lP4zSp/xGDNGeF7iOiXZhdRZdPR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4790abeae063e1891ed3e0dfa7e417b6

Files

4790abeae063e1891ed3e0dfa7e417b6
.exe windows:4 windows x86 arch:x86

db5cbdf3c6d113c5fa04b1cdc6f16c63

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

wininet

FindNextUrlCacheEntryA

Sections

.text
Size: 154KB - Virtual size: 464KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE