73937fdb7198faf4ebc58ce75a4b5096 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

73937fdb7198faf4ebc58ce75a4b5096
Size

2.0MB
MD5

73937fdb7198faf4ebc58ce75a4b5096
SHA1

db2fd1e37d82accce9ad3b5fe7252a0177bb457f
SHA256

45efec699d090b803e59a21735368a7a457080ca0480c55c02638ec8ca707f2f
SHA512

9a68cd7b950a3be8fa332883cacdb8bdba14ac8a8117bcadfb8efd47b184729a8d1dafc67b593a499b246fbe672268881d35900cb63ec57051181433b4b6fb17
SSDEEP

49152:+NXVdQjJb9B+ifMbyvzecPb3K2QSuqErBhHTpB:WEjJBBhzSa3BErBhzp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
73937fdb7198faf4ebc58ce75a4b5096

Files

73937fdb7198faf4ebc58ce75a4b5096
.exe windows:4 windows x86 arch:x86

d8b7c2b1b906f041992f6120c40e4f67

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 1.9MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE