8ab67ae4f175547429e0c26b6f2cfad0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8ab67ae4f175547429e0c26b6f2cfad0
Size

3.4MB
MD5

8ab67ae4f175547429e0c26b6f2cfad0
SHA1

f9e5672ce9178b537e85212d03d8f6cad38b3c1e
SHA256

dda99a530a84f39f641ae2e27745df07395af4960c4e191dd4948fd5a38a76b7
SHA512

73bf054f10a38fdda8f733fb5221df555fb5ac3d6a593c85e1348fc08d4e49af2771694c9a08017d756d0b73863dcfc4df2762a62f1a3ab1d07ef1215449ff1e
SSDEEP

49152:yhovvfRLGt/tCiV7nMckhycRX9RTiCXgy1rEb3pbhEIuhHrK7LI7mJiE2xTE9T:Bv3RobV7nMcejuCXF1W3u5rgL9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ab67ae4f175547429e0c26b6f2cfad0

Files

8ab67ae4f175547429e0c26b6f2cfad0
.exe windows:4 windows x86 arch:x86

b86cf5ffb2bcd9cd06d59b287065b137

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 3.3MB - Virtual size: 19.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE