ab1bebdf76ed3dee870857a648cd1186 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ab1bebdf76ed3dee870857a648cd1186
Size

372KB
MD5

ab1bebdf76ed3dee870857a648cd1186
SHA1

e43a1999e9f477026d87a33eb9027faf96c70f74
SHA256

dd931d0de5f99c6bc095cbaed015a7cc5a843ac79777e345d31321c9403549d3
SHA512

829612447b4f14e8d5e25d692995d82f061950b106f217edaf39ded7d3850cd3829263d27d54b13884990e7d507bc9b91d5f5a6219f1b3f9c9d02db95086e705
SSDEEP

6144:SHZA1kbQVjPXhe/qc+FNbHsHTUCzutSEVxCWr3rgNMPeXxEwf5I71IjBnsz+2SP:e/Q1PQIbMHIdtFxCaEN5XxEwxxmzCP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab1bebdf76ed3dee870857a648cd1186

Files

ab1bebdf76ed3dee870857a648cd1186
.exe windows:5 windows x86 arch:x86

f099ca6d7a16082569eda769a37796ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

gdiplus

GdipGetPropertyItem

user32

CharPrevW

gdi32

CreateCompatibleBitmap

ole32

CoTaskMemAlloc

oleaut32

VarBstrFromDate

comctl32

_TrackMouseEvent

wintrust

WintrustGetRegPolicyFlags

crypt32

CryptMsgClose

rpcrt4

UuidCreateSequential

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 326KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE