99d5ca859c4778deda047b3057422f0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99d5ca859c4778deda047b3057422f0f
Size

193KB
MD5

99d5ca859c4778deda047b3057422f0f
SHA1

56346d5508530a2fa4bd9c13a992b52d6c7e5851
SHA256

e063ce89902b3cc69753e44eab70f98026cb57f57b6f8b15a356a5c9829099bd
SHA512

1ba59fedb3904917316821fab5e8ad710feacfcf8bd418aaa8336f4f66c486539d0f278fc38e6b53e9f2cf8008bc3e341574a4508d1a92f8441a9ddba4d89f45
SSDEEP

3072:KQcnpuT3vHSehZSM4VC6+3Jsd50UkDBjTltBF+ObMvv4KrD50nHAEC46QXMmAIF:13/yQZSM45qUKlBcyS4KXmNC4HMKF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
99d5ca859c4778deda047b3057422f0f

Files

99d5ca859c4778deda047b3057422f0f
.exe windows:4 windows x86 arch:x86

a37750828a5ef4a08aa843e6963a402b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 159KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE