cd59e08146c8412928bb076a67edbbf8 | Triage

Sharing

General

Target

cd59e08146c8412928bb076a67edbbf8
Size

2.2MB
MD5

cd59e08146c8412928bb076a67edbbf8
SHA1

a58d63a7d8d7dd6f689a4b9c826b72b7922c7d3c
SHA256

f772d49ad96644ff9107db3d6ef4b83251c6d34feb9804f25c114e0ccf5b9313
SHA512

0d5445abe66f75bb4ae59e68259dff8a3b5133298ca041a06a5dcdcd9922d1bcad557beeb9c316dbbae5973976bd6269a03bca3762abfc0339f067021862a794
SSDEEP

49152:+PJxn8/fZraZQkIB8/JthZkNBfzX1FwdH9DeVBMxN0O:+PJN85raZUB8/lW7FmZeQxN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cd59e08146c8412928bb076a67edbbf8

Files

cd59e08146c8412928bb076a67edbbf8
.exe windows:4 windows x86 arch:x86

7547cd08a992b687c417434c3b5c7770

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

Sections

CODE
Size: 2.2MB - Virtual size: 21.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE