b4adfdd1982a51534d55314cb8726f0e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b4adfdd1982a51534d55314cb8726f0e
Size

307KB
MD5

b4adfdd1982a51534d55314cb8726f0e
SHA1

bb8a0820219b3644fde0bb3643d103f2576e3b35
SHA256

a3804575fc1dd0f8223ccb3ecaf5440ae532ac8a2e9cb813f704e977075c7274
SHA512

90b64cb7be2c9c61c5093cb0fae3182c81f6c35c81ac1cf2986c223ce9b9f0fb8e4301be5cea953c9812529f86145e77b16905a824705c10447d2720d8e61a5b
SSDEEP

6144:OSEyY12J5XmzPDn3SUl6RexWcr7kIwWoJf:Oxy/5X+bCHsxWcrYIwz5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4adfdd1982a51534d55314cb8726f0e

Files

b4adfdd1982a51534d55314cb8726f0e
.exe windows:4 windows x86 arch:x86

89983cfce020db6bf9ce6582a9ede920

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

urlmon

UrlMkGetSessionOption

shell32

SHGetSpecialFolderLocation

wsock32

WSACleanup

rpcrt4

UuidCreateSequential

Sections

CODE
Size: 118KB - Virtual size: 356KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE