598e57c048f4ee0e550aa66324a410c4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

598e57c048f4ee0e550aa66324a410c4
Size

71KB
MD5

598e57c048f4ee0e550aa66324a410c4
SHA1

82d27bd45d4d5605e06497b2f42e297bc1f52d70
SHA256

22c2913aa544247364911a9a8cee09a9930a72f446eb27d9f14ddbdd5e8c82ba
SHA512

9649535b6f4d4a982a847dc4d1b36cca6835ce7057a6e4e63602552d168b5f7a0a88515ed584756f5f55cb0ba449dbb230161e3d25d92d07873662503d7fecab
SSDEEP

1536:r5w6CFVhM9FhUBDD8J+LBGBRL6dkMswkXK6IMF6/:e6ClM9r1JkBGmdewkXGMF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
598e57c048f4ee0e550aa66324a410c4

Files

598e57c048f4ee0e550aa66324a410c4
.exe windows:4 windows x86 arch:x86

aefcd1187708b622071e7926c1f73a10

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

UnlockServiceDatabase
RevertToSelf
LsaOpenSecret
RegUnLoadKeyW
LsaClose

msvcrt

strlen
iswcntrl
strcmp

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

wininet

ShowCertificate
InternetDialW
InternetGetCookieW
InternetSetCookieW
UrlZonesDetach

Sections

.text
Size: 46KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 32KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE