d4ef73b3511701bbca7b9d16cc6b016f | Triage

Sharing

General

Target

d4ef73b3511701bbca7b9d16cc6b016f
Size

3.6MB
MD5

d4ef73b3511701bbca7b9d16cc6b016f
SHA1

a695fba4940b5dad4b0a8e4e62ec4170e35f79c9
SHA256

4db4754d0e2630bcbb9964989154d710cdb11345b3e08c5f25b19975f493c9e8
SHA512

83b04d12a5faf91a2bceaa4d8f36a8331185fe194a1fb2785d5bc6e6e5ec410a3eb2dfb5439d05a51e316382e281d357e4f2ac78bd2599901ba477e782ac05aa
SSDEEP

98304:ZwF+91UtJSSN1l+3cb0QArz1soxySJh8qmmIMq59LPl:OFc1SJSYuc/A1zMS8nmIj5pPl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d4ef73b3511701bbca7b9d16cc6b016f

Files

d4ef73b3511701bbca7b9d16cc6b016f
.exe windows:4 windows x86 arch:x86

c8353f001f2ad8bf90deb3c902fb93ce

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

wininet

InternetGetConnectedState

winmm

timeGetTime

Sections

CODE
Size: 3.6MB - Virtual size: 7.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE