b97f2fd47fbcd3ed9ff20d11a0d4f521 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b97f2fd47fbcd3ed9ff20d11a0d4f521
Size

491KB
MD5

b97f2fd47fbcd3ed9ff20d11a0d4f521
SHA1

5ca89054d3302c916e28eb7dc35d904de892547d
SHA256

cf851a3e9f3eba48b53747a824eb2367c3bbdba1e1cde30f563c456d81316d86
SHA512

c8dd6a3b78d6e147a26d6c57233632eae3d97643517456a2529b2ca3655f669fa79ed1bbbb7a0b5e1c614c77d8fd49476d85955ba2593fbe427f92f26cd2d417
SSDEEP

12288:jQqb/4k49Rsmfuc53+N3KkegEb74ZTh9lLi7A0OIhB:cqbgk4jsmfucxc+Dp9OIhB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b97f2fd47fbcd3ed9ff20d11a0d4f521

Files

b97f2fd47fbcd3ed9ff20d11a0d4f521
.exe windows:4 windows x86 arch:x86

74c8bf4a938fcfd1da0d91e7d39ead48

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegSetValueExA

gdi32

StretchDIBits

user32

WaitMessage

shell32

ShellExecuteExA

ole32

OleInitialize

winmm

timeKillEvent

comctl32

ImageList_Draw

cabinet

FDIDestroy

Sections

CODE
Size: 41KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE