c51d14d1d0120000a68b0de45ea0ae99 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c51d14d1d0120000a68b0de45ea0ae99
Size

815KB
MD5

c51d14d1d0120000a68b0de45ea0ae99
SHA1

b5ca5226b0ae072d46d42811d404acc5a42cc1f0
SHA256

69fc2742349e8d98043b635e64447adc37e39a8a575238ab8c50be23e101b81c
SHA512

46ab5b5b9d20aa125f2463cbc275362e74870ae14c5c56d2a6fe807ec7c33833512c258e27ea6b5b0d764ae14eac03131842a0ed25d763f3cd841901479f6337
SSDEEP

12288:3k6BCEe1nwGEZEjCWEkpgebdMhmaysEGMbAtP/S1l4p5soARevj/5koQlKa:3k8ehgEjCWYeb+mUEph1Osuj/xQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c51d14d1d0120000a68b0de45ea0ae99

Files

c51d14d1d0120000a68b0de45ea0ae99
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 802KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE