57afdae3aa980798ccd5f82fe24cfe79 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

57afdae3aa980798ccd5f82fe24cfe79
Size

170KB
MD5

57afdae3aa980798ccd5f82fe24cfe79
SHA1

b456f0be92474ffc780ed61f83a6d4ec1da88e29
SHA256

06c61bc30f691c9b7fea9a2aff3ad7b37fae5c7e30afeb96e38ebfee81647978
SHA512

e07745dde4b9b9a11acc66af1b4901680fb63156dcd026f630b8d0e2f3fa0b03feb2252a33b844161af25322b28bc3b16a181b42bd02d7ec0b4d8b4d13580898
SSDEEP

3072:GCUQ9Yf6V1eL033Au/tckdhzNraLJmdaFEgnDHwgyyDGp6jcwhaRSGX:nU9yV1ei33amNELJaMwgbDGp6AwkR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
57afdae3aa980798ccd5f82fe24cfe79

Files

57afdae3aa980798ccd5f82fe24cfe79
.exe windows:4 windows x86 arch:x86

cd755f0bd6c6325507b97d09eabbc9ad

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 137KB - Virtual size: 420KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE