7a88a864405ae82b4209dc17c4985788 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7a88a864405ae82b4209dc17c4985788
Size

2.0MB
MD5

7a88a864405ae82b4209dc17c4985788
SHA1

ab022daccb3618f693c7d4436eae28000f8e6b0a
SHA256

912cd25a4f0ab1ee0ebaca3aa9bd8f8a7f50a1fc8ff52bc635910908143f5326
SHA512

0df890f0c33176bed856e759a57bbd6e7d8f660fafefe41abda95ecad44fcf0f6cc78a862707bf0496238bc42bb272495ee4ebd37f107f52f95e57bb4cc6deca
SSDEEP

49152:Ys9yXidgga/1LWsIv6/uBO3JPaHLyr2ke2yu+mavV+:Yydggoisl/uyxmEByMavV+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a88a864405ae82b4209dc17c4985788

Files

7a88a864405ae82b4209dc17c4985788
.exe windows:4 windows x86 arch:x86

335498d0ad50a15a00903711c9441b27

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

mpr

WNetGetConnectionA

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

Sections

CODE
Size: 1.9MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE