59a154302991490566a63deeb5283cf1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

59a154302991490566a63deeb5283cf1
Size

73KB
MD5

59a154302991490566a63deeb5283cf1
SHA1

d9336de1c65ce8ae31f40a3f0d834700dba0068f
SHA256

777390b0c2f444ff8311667f15c987f0f66d196e147dc66ba1ed1a306544b481
SHA512

0c1ac032ac05dce79a2e09920acb7bf82513eb1742d11cba05c00dca93ad4874b06a1879a5bb5f511f69fef292594482e9e467cba528597bb611d251168793a6
SSDEEP

1536:mjlmpTrj6r29KUFcJzz2xLgVJ9iPTtaVNqhhZbkFkW4N4BL:9pTK28UdxMn92TlhHbkj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59a154302991490566a63deeb5283cf1

Files

59a154302991490566a63deeb5283cf1
.exe windows:4 windows x86 arch:x86

aa373078034ef680822904970420c063

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetScrollPos
LoadKeyboardLayoutW
GetForegroundWindow
GetMenuStringW
SetDoubleClickTime
SendInput

msvcrt

acos
iswcntrl
isxdigit

advapi32

LsaOpenSecret
RegUnLoadKeyW
UnlockServiceDatabase
RevertToSelf
LsaClose

wininet

InternetDialW
InternetGetCookieW
ShowCertificate
InternetSetCookieW
UrlZonesDetach

Sections

.text
Size: 48KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE