678e4360e4c0c8142e25783cafeb48db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

678e4360e4c0c8142e25783cafeb48db
Size

3.9MB
MD5

678e4360e4c0c8142e25783cafeb48db
SHA1

ffcfc600c1aaca7bba4fbc91916ef50b1b728aba
SHA256

d4833d6e3a9d1a01edb27e0fa81d6961ea118bdc7b4480b790ff490f8592c05d
SHA512

e4fe421d83e53386f90d85337a8a6be5461156f0100a3fb50c072701bab2ab81ae4044599bf85ef6ea838e4937fb1a6d77a07cc7a8e704810016145c0936ccb7
SSDEEP

98304:m4ZJS+XlHwwwSuuGZ/kvlSOUpClVL0oAlHN7:m4ZY+XxwzcC/mvUpClOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
678e4360e4c0c8142e25783cafeb48db

Files

678e4360e4c0c8142e25783cafeb48db
.exe windows:4 windows x86 arch:x86

191b325bc9f40dbeacb31cec5a223eba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetKeyboardType
CreateWindowExA
DdeCmpStringHandles
ExitWindowsEx

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameW
GetVersionExA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
DeleteCriticalSection
TlsSetValue
lstrcpyA
Sleep

advapi32

RegQueryValueExA
RegSetValueExA

oleaut32

SysFreeString
SafeArrayPtrOfIndex
GetErrorInfo

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

.text
Size: 22KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE