65467aa2a8fcb82f38d9efd5cc1b9fbd | Triage

Sharing

General

Target

65467aa2a8fcb82f38d9efd5cc1b9fbd
Size

371KB
MD5

65467aa2a8fcb82f38d9efd5cc1b9fbd
SHA1

61e97d9be76ff320082a06d5a7f73578a2390fdb
SHA256

8447c5d97359880ed632eab9173d4c2902ed814b63fa99f86bf8262002548b81
SHA512

d053ae63d7d485624142726319733e8139ef9fda3c3aea34654b3b9323d9a7e18f93fa625dba715e8bb5ad88161623a24b84bdd0a5221a002dbcbb83800d29ee
SSDEEP

6144:KzLj4vRzRDkUyw9xo0ys5oaRIZStnqhq/qKnTFV5n2KOOIVGsk4uKkiQNoWp:KXj48j7aqSny8qKnTzV2K7IOiP0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65467aa2a8fcb82f38d9efd5cc1b9fbd

Files

65467aa2a8fcb82f38d9efd5cc1b9fbd
.exe windows:4 windows x86 arch:x86

b90b633e21f69b87144e65d10cec63ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegQueryValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

.text
Size: 49KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE