665d617584c27aed951333ceff4f038d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

665d617584c27aed951333ceff4f038d
Size

201KB
MD5

665d617584c27aed951333ceff4f038d
SHA1

9f3f5d278d48503ad798c7aa5b9912305b82ed61
SHA256

14a44f8c4b8938a91613654b6b5dd52e1c4e58aaeb6cfc7798cebad0260e3388
SHA512

62d04f3032694b68c8ca37242b1d8577a93ce17b6dc5388d70a74b26be0cebe5ae33dc455fa2762f46aa3d689b7ecacde4cbc130b0178c56f99cb0cd4f5d6de7
SSDEEP

6144:a5HTCcJg8PDiEn7wOmwYXGnvUkD1FacB3FZ:8zrJhrnS9XGvND1FacBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
665d617584c27aed951333ceff4f038d

Files

665d617584c27aed951333ceff4f038d
.exe windows:4 windows x86 arch:x86

c55d58516ab8b94df1945dd02ca3b318

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 168KB - Virtual size: 520KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE