987b474c63a9f7be2cd77fac46daa648 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

987b474c63a9f7be2cd77fac46daa648
Size

1.4MB
MD5

987b474c63a9f7be2cd77fac46daa648
SHA1

c1199b3147ed61f472e32f20a39731a663206302
SHA256

0feb78651cbd4f6744cc733f6192a4174da3bdac85f7c74cfbf23aa1445ebe40
SHA512

3ba926d9b7355126b8343d824543c875cdf3343388f2ed5f54f9ef7069b298b239aa21553ec4e4a97f12b84c5fcc24836cd6655d6badcefb5c3f94514e012b71
SSDEEP

24576:5IDCfT0LcyWt7bxquGs2NAJ/TBxsACWAEtZYTELOM+dKRbRfglm6LN6k:5IOL55tRGsacFWEtZYT+V+As8G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
987b474c63a9f7be2cd77fac46daa648

Files

987b474c63a9f7be2cd77fac46daa648
.exe windows:4 windows x86 arch:x86

145e78588016d3fd1f1a2547997e984d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

FindNextUrlCacheEntryA

wsock32

WSACleanup

Sections

CODE
Size: 1.3MB - Virtual size: 17.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE