de572ca21cc47e529356a8288118628f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

de572ca21cc47e529356a8288118628f
Size

195KB
MD5

de572ca21cc47e529356a8288118628f
SHA1

31de01917f0ca21e525fcb1953180bd0804ab637
SHA256

d4969b703146571d14a6aefcbeb30de6c98c74d94817142a6e1b44b5729a2611
SHA512

ccde450a76668b4157728b3e5b01a25ba47a46f1fe0de927f434f10f4a3b87b9bbc33dd3059a0e8dda1d1638509fa5dedd3a370e9c0e10f31014242462b96825
SSDEEP

6144:y0CdhiiUYgu2EQvNq1k9ECK9TZrWrw8LibYW:AcJvo1k9tKRZDbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
de572ca21cc47e529356a8288118628f

Files

de572ca21cc47e529356a8288118628f
.exe windows:4 windows x86 arch:x86

7652ffa60974da39227e039bb4c38372

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

comctl32

ImageList_SetIconSize

urlmon

HlinkNavigateString

comdlg32

GetSaveFileNameA

Sections

CODE
Size: 160KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE