74d3a31fbcc0910a39f2013bc74fd266 | Triage

Sharing

General

Target

74d3a31fbcc0910a39f2013bc74fd266
Size

217KB
MD5

74d3a31fbcc0910a39f2013bc74fd266
SHA1

835eac09b21daad238bdeed23cf01c0c6636587d
SHA256

52d2425e607cbe4bf6932510b06235eea6dadca411e3bf85edca05f220c11f59
SHA512

c52d9dbd3c625c1914fdd7a603212a68839d2356c2aef8081409fdb486fa359fd0f9ad548e8537cbae3e0255594abff58a3e54f7e5f0ed0f0232ab16acbf50cb
SSDEEP

3072:j/zIYmjiju/N2phuP4rARSi1jdojxn5t8u1NtQ+fhyGBsar6qcEARFlbWlOz:jz5mj+Y+8RSi1ajHt7NaMV6vf8Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
74d3a31fbcc0910a39f2013bc74fd266

Files

74d3a31fbcc0910a39f2013bc74fd266
.exe windows:4 windows x86 arch:x86

6e2e1554809ec124a2bafc1ca10a8325

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

Sections

pec1
Size: 207KB - Virtual size: 500KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pec
Size: 1KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE