a2cda4decb51e759e9f5584d312880ba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a2cda4decb51e759e9f5584d312880ba
Size

49KB
MD5

a2cda4decb51e759e9f5584d312880ba
SHA1

5bdac53512837af4d3f66402053b412ce497337f
SHA256

a4d5b63909980695733709777cce814661eb4a1bd8cdffa0ce3b2edaaa102122
SHA512

2a9e3b54a4ed58ffa99b8330bce8a12999dabe3457efdf6036d2837df7ff98a17cca9c5677d1381abfd080921cdd387b06a98e857644c8df0d7f49eed5ea8b69
SSDEEP

768:LRWoRRHNuIuNocxM583Xljfa4ZCJorO6J7J/mvVyYfH7FRBd3iqGXH5iNz:LRWozZMx1394iO6J1+dDfHzL3iqGpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a2cda4decb51e759e9f5584d312880ba

Files

a2cda4decb51e759e9f5584d312880ba
.exe windows:4 windows x86 arch:x86

4da702f9b1d5061c0421b91bbacedc65

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

shell32

ShellExecuteA

urlmon

URLDownloadToFileA

Sections

CODE
Size: 34KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE