490bf4cf5e1694c35ecd742c05287613 | Triage

Sharing

General

Target

490bf4cf5e1694c35ecd742c05287613
Size

107KB
MD5

490bf4cf5e1694c35ecd742c05287613
SHA1

2e73f6dd7ea6828b31a93fad91e58fac1062a26e
SHA256

bc9c34b7bfbaa4a3be78ad770a96dc46f842bccf18d66e9c8a7ae67cde57884a
SHA512

2c948a5b65f16a458387640e53bc9b58fced76d3f0313a1c06325cb9671eeaca2345dbebfe6e8adcd124b813a68bb251fcfbaf54d44bbd2ace551bc9f23936c8
SSDEEP

3072:wKAzESIDMgeEgo4dFwnvPKKfNjdy7pHxSjqT:vKIDMcghwnXhIjSjE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
490bf4cf5e1694c35ecd742c05287613

Files

490bf4cf5e1694c35ecd742c05287613
.exe windows:4 windows x86 arch:x86

0dd28c30dea0b829fe2addad09403d7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLOpenStreamA
IsLoggingEnabledA
CoInstall
GetClassFileOrMime
AsyncInstallDistributionUnit
IsValidURL

gdi32

SetICMMode
SetRelAbs
ResetDCW
StretchBlt
SetDIBColorTable
UpdateColors
SaveDC
TextOutW

shell32

StrCmpNA
SHFormatDrive
SHAppBarMessage

Sections

.text
Size: 24KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE