64a6a228b280dde641882cbb0a4c598f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64a6a228b280dde641882cbb0a4c598f
Size

171KB
MD5

64a6a228b280dde641882cbb0a4c598f
SHA1

e1b8a11290fc9df85eed399e3ea64ff3883ae235
SHA256

2dda2573dc8c8fb4ada700b758cd6c9a47440a18bbb8d4f79a3f118db96a8f3e
SHA512

1339e06bde57fb0ed06b36bf6e39677bd53dbc142f243ebf7eca7ebd7bcec42cdd0b10d45fa1076978a7bc2ccdb7ebd037be6677936f8ebcae73fddb7e36eab2
SSDEEP

3072:Cv6762DvKxPVZAF3bp/3LCvlvwBF/aXheHMth+QfHFeFZw9XOMZD4ESqfiJKQK3B:pmxZAF3bp/3mvlv+/8heTQfleXw5OMZf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64a6a228b280dde641882cbb0a4c598f

Files

64a6a228b280dde641882cbb0a4c598f
.exe windows:4 windows x86 arch:x86

dbbc81631ebaa0a7d1f8fda3d6652c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

URLDownloadToFileA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 140KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE