b4c2f515aeba85aeb77ca67f730e131b | Triage

Sharing

General

Target

b4c2f515aeba85aeb77ca67f730e131b
Size

917KB
MD5

b4c2f515aeba85aeb77ca67f730e131b
SHA1

76e4d7e841003d2208200f80018c8c5958cbc195
SHA256

6c57d5be8d55af0579603912922d9b45e8f65af349990ffa2688f94dfe0a0625
SHA512

4676a9574414e997843d3d373afbd82dc571773640cc3256c7ae4aa3367f429351b8f0655d7cd0e2201092a301bb1dfb1fce1711f5aef622a2d039b1cc6727eb
SSDEEP

24576:sKieVF4O1sTUpHeizgoEbmNkdBxBT+Q4w4u+D24:s124O1v9eizgofNkLRS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b4c2f515aeba85aeb77ca67f730e131b

Files

b4c2f515aeba85aeb77ca67f730e131b
.exe windows:4 windows x86 arch:x86

7c860e9d4854a0044b10557398fa2219

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

wininet

InternetGetConnectedState

Sections

CODE
Size: 906KB - Virtual size: 13.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE