ab3861e138d4b16b7adec5f640bde735 | Triage

Sharing

General

Target

ab3861e138d4b16b7adec5f640bde735
Size

232KB
MD5

ab3861e138d4b16b7adec5f640bde735
SHA1

254cfe0d8d8be95653bc3e84937ea47c97752361
SHA256

dccf939ae6d03254518289264e6891c7e6c809d3ea753a6cdf13e531e9bd1f4b
SHA512

15b664221bfcfde4245e84d070efaa30fc7cdf14368c16234afc51d20147add9bda77a1057e0e08f432cee8895e9b9fc43373878152f5617f5ce02559d14cec7
SSDEEP

6144:mGzOmXWa3Mb2lL2O+Ps98QfY7BGuDQnKyzFA3Hen3Uz:muO/OMba86pY7QuWK8FA3uU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ab3861e138d4b16b7adec5f640bde735

Files

ab3861e138d4b16b7adec5f640bde735
.exe windows:1 windows x86 arch:x86

9bdc6aa7f8e500969682aca0820090d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

VariantChangeTypeEx

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_GetImageInfo

wsock32

WSACleanup

Sections

CODE
Size: 224KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE