637fd9f6dd7948b30a32b4268a6f23af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

637fd9f6dd7948b30a32b4268a6f23af
Size

159KB
MD5

637fd9f6dd7948b30a32b4268a6f23af
SHA1

3b0423c2a8b2abcc5350940f7f0040cf8c7af846
SHA256

7ba962f3c6a4624980e99bf58fa299e4f04c8c327a83d886ab54b36fcea6d5be
SHA512

3b22ceee22e016539116e519beab2dca29ecca3d1274fc4db92ab02c1b486392ca462c660931dbcd366e0f258df4aeb98b637ef0b0663811806e95a105efd14a
SSDEEP

3072:QKp/b3iL/bUU2xzdv5f/sNTgB07tryzTPonAoyk6nDyTGHQUUd6N45l7wKXz:QKjMzUU2xdbG7tezTPcTyOSwrH7w8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
637fd9f6dd7948b30a32b4268a6f23af

Files

637fd9f6dd7948b30a32b4268a6f23af
.exe windows:4 windows x86 arch:x86

f95c3d489bb12bcbac4bf2fe9e9a9ceb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

Sections

CODE
Size: 141KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE