765e0505ccec8b60d1c8f3c7e12ff451 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

765e0505ccec8b60d1c8f3c7e12ff451
Size

382KB
MD5

765e0505ccec8b60d1c8f3c7e12ff451
SHA1

fd0af190500b455628335d030599e75265ec274d
SHA256

d9df55c35aa24d8e861078aef21ada89b7a80f2ea15034ed1553b11d8497ef6b
SHA512

0d27ea4e20afb230e850cf048cbfd02957768e9192fc0b358d8758a537ca9c240d44bb77ef472474145c52615d4190e7af03f7560fbbe74aef9fa2516eb5c61f
SSDEEP

6144:z2qf3qjnh+dm5mvnDEcbG+TVWSKQaNbn9tdMZg+2xt3UL35uYfgTS+iqb0ekyqL:z2qPq9s4cKnhh98OuFFE0Lyq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
765e0505ccec8b60d1c8f3c7e12ff451

Files

765e0505ccec8b60d1c8f3c7e12ff451
.exe windows:4 windows x86 arch:x86

97c70051a06b4fc867c222383f59d4de

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ExtractIconA

hook

HookUnload

Sections

CODE
Size: 366KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE