acbe6524646e01b126c20163c64e896b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

acbe6524646e01b126c20163c64e896b
Size

582KB
MD5

acbe6524646e01b126c20163c64e896b
SHA1

b5aac3e94b60e07f18c52ef268349740abd3cb63
SHA256

cf84ee4b01e04a58eb1aa1a1f5fc9561268ae25796cf3a4de96cc59b287efbb0
SHA512

094f0fbb7c703729c1b5ed9ab10c107636566296aafa297ed83670a1ba926e5ebf683f3c83d9b8e2fcfa8b613db98d8158dfc9852d5bd186936754653b0516fb
SSDEEP

12288:JyIUBJiLvmDvZGcl7rW6POtgDIOnt+F2jVlKtKXq6A2Hmf9uwLxShfO:YIU2LeDvRrW6POtgpthSkwLxifO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
acbe6524646e01b126c20163c64e896b

Files

acbe6524646e01b126c20163c64e896b
.exe windows:4 windows x86 arch:x86

49ff2cdd04e2d207c0d69c390147b81e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

comdlg32

GetOpenFileNameA

Sections

CODE
Size: 570KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE