61af73f22594bfe54f2981517d276c05c90be3f90c6fc80a3316e4b691f89fea | Triage

Sharing

Copy URL Twitter E-mail

General

Target

61af73f22594bfe54f2981517d276c05c90be3f90c6fc80a3316e4b691f89fea
Size

5.0MB
MD5

bf0ea18faa6bd54f109db012fd757953
SHA1

61f49fdc972e930c9c88a6b07ea117b0783c2881
SHA256

61af73f22594bfe54f2981517d276c05c90be3f90c6fc80a3316e4b691f89fea
SHA512

dae46fce16c0c41e5059442dd439ef80eed2fd60c31de5c9acd01cb0d337344743bd46f40ef2be56bb87ef95d63395eacd99569c5e75fa4715465388e50ef6fa
SSDEEP

98304:AoHNZepsSVs2Z/oexNikDBqb+9y6z593NWvQW52ivHjOLM5yol+rQymQrVG3uG:AotZgs21BRLdoQlSOLM8gYQrQrVGl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61af73f22594bfe54f2981517d276c05c90be3f90c6fc80a3316e4b691f89fea

Files

61af73f22594bfe54f2981517d276c05c90be3f90c6fc80a3316e4b691f89fea
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.0MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE