639f5e93bcac941530352e0916880c19 | Triage

Sharing

General

Target

639f5e93bcac941530352e0916880c19
Size

2.2MB
MD5

639f5e93bcac941530352e0916880c19
SHA1

564e54f749ee1c08ff65c95f99d8fa2f277bfc31
SHA256

cc3d543e01f02408b76a2ffee482db5ce0e36b6a21ec1813dc32d89af99513b1
SHA512

3c502469e41a38b12dc308cdda48f44814b3f3422bdc20067e2a6486862719cf0322cf4f6bf13849392f1a14e8998000e9c557e1aaa3c240485279d54277b842
SSDEEP

49152:Lh+WjxRdLeF7E3hZ61ypomk2rWG5R4obiCedd/grhVU:LQWHdL2E3hE1y4295JiCu/Ah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
639f5e93bcac941530352e0916880c19

Files

639f5e93bcac941530352e0916880c19
.exe windows:4 windows x86 arch:x86

cb8779150388b4b8626d4ff363211b20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 2.2MB - Virtual size: 12.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE