541a7ba9b3112502ec87143497114d9b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

541a7ba9b3112502ec87143497114d9b
Size

1.1MB
MD5

541a7ba9b3112502ec87143497114d9b
SHA1

acc984eccf4dc1500f48092da096e0346722deee
SHA256

58d8e503e99540284f43bdc1abe74c2e0892ba66308c494e582b9f97212fdd5c
SHA512

cedd634891c247c88f4867817b6f6f468597a0a435f74799c291c8304660f3bce5265e6c5b5de69bd788c2fe1eefdaf7e9358d1756e6e00fbfff821a2e1ab977
SSDEEP

24576:pE1edq4Fr1U4a/uY3O8l73ZnPuFyWgxREsOyUsdI9uKjei0:K1T4F4GY3fZPd/LFI9u4b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
541a7ba9b3112502ec87143497114d9b

Files

541a7ba9b3112502ec87143497114d9b
.exe windows:4 windows x86 arch:x86

427a13b6b0ea99d219b27dd2547faa56

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

shell32

SHGetFileInfoA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

shlwapi

SHAutoComplete

winmm

mciSendCommandA

Sections

CODE
Size: 1.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE