72466436a47e6253ce4e44725c89d492 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

72466436a47e6253ce4e44725c89d492
Size

915KB
MD5

72466436a47e6253ce4e44725c89d492
SHA1

a989d943c4b631bb35cfd9b988f503489faf5dac
SHA256

cb789bf3e55b77909a4b928ecc4ef2240dba920f15529e70ff2b8716f32b9a94
SHA512

cac8a04692c19cef9ed4b2ae83fbc0c4143e567e899da9403e05b4506e3773ee5b53ffd40df892b48a85f6712f6bc12c0e0d114815a53786053b8a3d785db515
SSDEEP

12288:ZknybPsGNB/DeZg8AVH3c6Hm5gt2fBbRaPQiGLTlfO3D+x1h4/L8FM:yAFqZpcXr2RcaA3ax1h4jZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72466436a47e6253ce4e44725c89d492

Files

72466436a47e6253ce4e44725c89d492
.exe windows:4 windows x86 arch:x86

775d2df94aa8b69a88fb57833499cb5f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

UninitializeFlatSB

shell32

ShellExecuteA

comdlg32

GetSaveFileNameA

msimg32

GradientFill

Sections

CODE
Size: 882KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE