fd9529a07c23cf530ba4f1768606ac771cfedcc95a4769357a5295435e17eaba | Triage

Sharing

General

Target

fd9529a07c23cf530ba4f1768606ac771cfedcc95a4769357a5295435e17eaba
Size

12.2MB
MD5

f69f7d42f82575a506e5ec6afad59f2a
SHA1

35eb1da2d74396e56dd98d7a934efce392d82aa3
SHA256

fd9529a07c23cf530ba4f1768606ac771cfedcc95a4769357a5295435e17eaba
SHA512

88a6405f798913a0421df12bd0c504385467d35b38135b4f41a880f23a130acceff89b3ae91d128909b3d557133fc5a4910d32da0ec56589dbf2066a1660b341
SSDEEP

98304:8NTArXJd8sHRzozoAagFNFO5ukPHD344Lo3Adoskqq3pQWGhc1:CAT8sHRzoz8gFN05ua84U3tv3jR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd9529a07c23cf530ba4f1768606ac771cfedcc95a4769357a5295435e17eaba

Files

fd9529a07c23cf530ba4f1768606ac771cfedcc95a4769357a5295435e17eaba
.exe windows:5 windows x86 arch:x86

ddd9b89e0d6bae22462bf858815ef509

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

advapi32 kernel32

RegQueryValueExA �3�

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ