497771a4bf8b8c44a5c2f6683b596c4b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

497771a4bf8b8c44a5c2f6683b596c4b
Size

77KB
MD5

497771a4bf8b8c44a5c2f6683b596c4b
SHA1

32ceaa4d2a8cad5b82455552af8d0d60d5f660f6
SHA256

ed6e6d36f546b3e873757446ddce8d72d2247813b3e6a92194fc78796bc6b5b0
SHA512

4b3123ce17fdfb48955ea1b8068e387cf35fb0ba8f1e3c30360807e9f6ed5664de3ae99c13497a7b5a71c5070a6ab0ec0662b10e749a6c483625e5a20c18bed1
SSDEEP

1536:g017k5tJdgI2NncV1pTLSPwLZR83TtrV2r58+Rb7mDd8:gpv+hnc/pC4LT2TVVcy+tCB8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
497771a4bf8b8c44a5c2f6683b596c4b

Files

497771a4bf8b8c44a5c2f6683b596c4b
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

ddaa08ec4ae1b0eccc5bd12fd3bb8c20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

UnlockUrlCacheEntryFile
InternetGetLastResponseInfoA
InternetEnumPerSiteCookieDecisionW
InternetSetDialState
ShowSecurityInfo

advapi32

CloseServiceHandle
CryptGetKeyParam
FindFirstFreeAce
IsValidSid
FreeSid

msvcrt

strlen
_cabs
__wargv

user32

IsCharLowerA
GetWindowDC
LoadImageA
GrayStringA
GetSysColorBrush
HideCaret

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE