bb664fe859cfd283d6d1b3b83b564679 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bb664fe859cfd283d6d1b3b83b564679
Size

141KB
MD5

bb664fe859cfd283d6d1b3b83b564679
SHA1

227ba03cd1ad22b27077bcdb5e6939e50c9d37e1
SHA256

c4ba57c685488370c868a45272e158f37a9667e1c644cfc7ac1158dbfe82456c
SHA512

d4643e80a2f0125445584af2164be691b3c665a591e06c19e9e79a066c05432a51761242014b48c157a7711abbaa543d4d4de66d6cb0dec76a5e696a6222fac5
SSDEEP

3072:RvXGLrH0aBV/U3QzIHDtt0Fxd+xeztTuDg2DxzjC41ASwEPqoi3:ROHUaBxU3QEj70FMehmxcS9Zk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb664fe859cfd283d6d1b3b83b564679

Files

bb664fe859cfd283d6d1b3b83b564679
.exe windows:4 windows x86 arch:x86

dbbc81631ebaa0a7d1f8fda3d6652c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

urlmon

URLDownloadToFileA

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 132KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE