1b00658fcdcc8fac477489657d3e8bfc389c9bf43087a68e596df10b312c81b6 | Triage

Sharing

General

Target

1b00658fcdcc8fac477489657d3e8bfc389c9bf43087a68e596df10b312c81b6
Size

4.6MB
MD5

3907afa475ff47cd4d29fbbf4d52a22c
SHA1

d1bf725277f2872add5eb017216876b09e378170
SHA256

1b00658fcdcc8fac477489657d3e8bfc389c9bf43087a68e596df10b312c81b6
SHA512

5a305922d9c53e4efe0c82d9f18e7a6b05aff4c2f22f521dbd23a19990de836dc894dd2ec340c5061a4a3d5c8fa7e1cd7304846ef33c484a1c53d91880d6ed2e
SSDEEP

98304:AoHNZepsSVs2Z/oexNikDBqb+9y6z593NWvQW52ivHjOLM5yol+rQpHFSQ:AotZgs21BRLdoQlSOLM8gYQ1QQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b00658fcdcc8fac477489657d3e8bfc389c9bf43087a68e596df10b312c81b6

Files

1b00658fcdcc8fac477489657d3e8bfc389c9bf43087a68e596df10b312c81b6
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.0MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE