adf82b5152feb98f8a6bab3bfb014eeb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

adf82b5152feb98f8a6bab3bfb014eeb
Size

301KB
MD5

adf82b5152feb98f8a6bab3bfb014eeb
SHA1

6084126253ffaccfa1c3200a329911eb4c2a8531
SHA256

3fb9eb023b398bc000580be7782df1069e15b88f532c629e3ab037f2c55f2a9a
SHA512

0e28dec87780619264679731d795af250b78456444a394405dc72054fbbc57206c8962b685f71e41e227596efe89c973277ec8131086aef27184fa768aca4f22
SSDEEP

6144:vJEYERqaQiEYixXAkmOgoUpMEEdlntRb5A+na4S35EQw8:R5+qntJxjfg5mxdltZ5A+na4RQw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
adf82b5152feb98f8a6bab3bfb014eeb

Files

adf82b5152feb98f8a6bab3bfb014eeb
.exe windows:4 windows x86 arch:x86

92bfd8d0eccfd8944769d829f6305c80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

VirtualProtect
GetModuleHandleA
GetProcAddress

user32

CharNextA

advapi32

RegCloseKey

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

SaveDC

ole32

OleDraw

comctl32

ImageList_Add

wininet

InternetOpenA

wsock32

WSACleanup

Sections

.text
Size: 295KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

pepack
Size: 45B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE