6706882b45eea0dd8a9c612636b4d73c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6706882b45eea0dd8a9c612636b4d73c
Size

256KB
MD5

6706882b45eea0dd8a9c612636b4d73c
SHA1

c657392e588a6667bc4f2f9160f61282f084b0f3
SHA256

628a1056afd246f16dea6c5d1826570522866a383b1895fb8da68f0588d79b6f
SHA512

938f098c5984d4b282c18970c2c85691d70521cfb796325fda4621e67fb80ee3a533bf7af7079ebfebcd90f24e8efd4d46d4af0e698e8bed2a88ded1fbdda229
SSDEEP

6144:TbOunRNR9L26cM2rvZXHppyOM187UQ6BJJ02rt7u47CRg6VBCPc:TbOun77eRXeXnBJJHX7CRgZPc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6706882b45eea0dd8a9c612636b4d73c

Files

6706882b45eea0dd8a9c612636b4d73c
.exe windows:4 windows x86 arch:x86

397865c786c4c8766a601cbd893174f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

.text
Size: 248KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE