bca44b4a1b1acdc9d7f399d10a6bf9e1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

bca44b4a1b1acdc9d7f399d10a6bf9e1
Size

179KB
MD5

bca44b4a1b1acdc9d7f399d10a6bf9e1
SHA1

587ac9ad0a8ca2bda35a83da72793d02267d2c15
SHA256

cb8f27944cefae75a4a0b9453466f57da93d991b3f80d2c63305092f7f043a64
SHA512

803b8565cd6d2cf05b5609c9bba40494a3cc172ced3140067a06dc39485bc9922a8781bf2e44a7452be16a3876973bca0de543ac407ad3c6040f685cb80e9b3f
SSDEEP

3072:SwLpg3mgbi2dlfgYtCLX+pbiyBBnm+ozxDMkEkTA1hgR0mAvQmdn5vzHS/W:S4g35ptkbSiyDmdWL1h3vQ45LqW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bca44b4a1b1acdc9d7f399d10a6bf9e1

Files

bca44b4a1b1acdc9d7f399d10a6bf9e1
.exe windows:4 windows x86 arch:x86

19c0968ab309786bc667e7c2171d1b37

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 171KB - Virtual size: 512KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE