b994c24f5a8baf859ced203d7e2970a2 | Triage

Sharing

General

Target

b994c24f5a8baf859ced203d7e2970a2
Size

202KB
MD5

b994c24f5a8baf859ced203d7e2970a2
SHA1

da2ec336c2223d70256eae316eab73ae98f4c8e6
SHA256

5493373847b491101aa7b33ff89ed87ab350841cdc93be7ac9cef48aff159358
SHA512

bd76cc2e1b9f502ce12ca493467caffcbd31096e10827f4c6b9d11e67536045a1c1360734dc68f654870fe8238f6878503c1d8fe85c2b5e8730f9cd61d276d5e
SSDEEP

6144:vLDLiMwfuGp0IVO8hL3LUy4j5zDoUbmTtxgNm:sfuGpxhL3LUyiRNyT/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b994c24f5a8baf859ced203d7e2970a2

Files

b994c24f5a8baf859ced203d7e2970a2
.exe windows:4 windows x86 arch:x86

a56c454d0c6e31a02c05e10f152af395

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

shell32

ShellExecuteExA

comctl32

ImageList_SetIconSize

wsock32

WSACleanup

netapi32

Netbios

Sections

CODE
Size: 191KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE