59988ce8466d2fe4e2f403b836d45256 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59988ce8466d2fe4e2f403b836d45256
Size

434KB
MD5

59988ce8466d2fe4e2f403b836d45256
SHA1

cefe603f9b1dc7072521fef0250c4d8cf29fed69
SHA256

6512a051b84894e95c034818136b60f7a2a2fb1878a2add1e8cd11b9752a6d71
SHA512

aede63d22b2ac1a75eee74b5c81b3e6871157504d2416591dbe71445f0d474bcfeb244b406bd63a2d579d81fb25630bc649f02be9a17406d54e6b2f836f762a3
SSDEEP

6144:8QMD3pQ6w1qxNAMsE7szIqwb/zT79nMeILh8O07em8Pm:8QMzi6wKNAMlszIqwb/D298OAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59988ce8466d2fe4e2f403b836d45256

Files

59988ce8466d2fe4e2f403b836d45256
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 347KB - Virtual size: 5.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE