9377b67b9f81b4ad8338461d5741463f48503a5ade2196464221e91a193fce14 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9377b67b9f81b4ad8338461d5741463f48503a5ade2196464221e91a193fce14
Size

9.7MB
MD5

7342f3fe3ad5c65570d18c5de03a5148
SHA1

7350bcd0848fc775afb2b8f049e5936d2db3ed29
SHA256

9377b67b9f81b4ad8338461d5741463f48503a5ade2196464221e91a193fce14
SHA512

97cf4d326cd6d330c4c064c4edaa3383c97e2fa305ec0734f39504e667b2952754ad54c449e194fff8fd50939f4b83d9d7d0b6949fd0467f0f382dafaa8c2884
SSDEEP

196608:qV7EL77cUKRrj7nlAGIsg6zOo/PuPv+GzbOIfthE7h:qJEL771W7g6zOKuPv+maIVh8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9377b67b9f81b4ad8338461d5741463f48503a5ade2196464221e91a193fce14

Files

9377b67b9f81b4ad8338461d5741463f48503a5ade2196464221e91a193fce14
.exe windows:5 windows x86 arch:x86

29564952e3a51ce835e823c5feef439e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

wininet

InternetSetCookieA

shell32

ShellExecuteExA

comdlg32

GetOpenFileNameA

ws2_32

WSACleanup

shlwapi

StrToIntA

Sections

.text
Size: 5.4MB - Virtual size: 7.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE