d6c37f5451f92dd442e90f00eb3194f7 | Triage

Sharing

General

Target

d6c37f5451f92dd442e90f00eb3194f7
Size

149KB
MD5

d6c37f5451f92dd442e90f00eb3194f7
SHA1

c739678391047d9204f2abc1d48c964670c36453
SHA256

351de8c35c05169c41d6762b25c825575772766cd1f9a12d673e5b207739f6d1
SHA512

5fadb3779925bebbc7d8881db9a853567e935b30161a8a2c770ebc6dfda624ee2f0c076d4ba315fd286eef5f0e80e9abfad883fa50d25d2ac701037acb8bd699
SSDEEP

3072:URJTEH3Qz9RDq7pO66kD/KYhIOvVjwD3lv27WcaGsm5eTRd6l:URSH397UfY9vE27qmedd6l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6c37f5451f92dd442e90f00eb3194f7

Files

d6c37f5451f92dd442e90f00eb3194f7
.exe windows:4 windows x86 arch:x86

face8864ff2cf81a89fe7ab41068c2f0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoUninitialize

comctl32

ImageList_SetIconSize

urlmon

URLDownloadToFileA

Sections

CODE
Size: 138KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE