878ebac3f08e95765a7c9f1ee33f8ec2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

878ebac3f08e95765a7c9f1ee33f8ec2
Size

469KB
MD5

878ebac3f08e95765a7c9f1ee33f8ec2
SHA1

ab29213800e518f40d4b97c5023d50de87419a66
SHA256

d3a87a3c7813d1b1e59bb372e9649834ef215ca8fafe9879df0a7222f40b1b92
SHA512

33f638f32ad528bebc88aca82931014d2cde48b4e31237d41dc676c7f4cd042346c2564c9ab670f036e33592ae462f752a5f7e11b65229ad77ce8ea54e9245d1
SSDEEP

12288:SeFAXMgW/RvzxGSiqTsPophTIX5BsIhvN1:IXMgW/lFG3uTw5643

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
878ebac3f08e95765a7c9f1ee33f8ec2

Files

878ebac3f08e95765a7c9f1ee33f8ec2
.exe windows:4 windows x86 arch:x86

effcd98e78101ba25faed36ace3b7658

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

Sections

CODE
Size: 459KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE