64b6f74489c6b6a213a431ad2d4d2ce6bf6e6bc2a07aababf7e25eeeea0f80fc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64b6f74489c6b6a213a431ad2d4d2ce6bf6e6bc2a07aababf7e25eeeea0f80fc
Size

4.7MB
MD5

060cdc6235f5ccf483d3530b77558ebd
SHA1

351f7e1ed5e579d8d523fb74ffbf089b1c3413c1
SHA256

64b6f74489c6b6a213a431ad2d4d2ce6bf6e6bc2a07aababf7e25eeeea0f80fc
SHA512

3f549ec228eb87e7924e36716f5d10d0aa039f3d10948ac766ec64571dafdb1edd5bda99e795712899dfa3d8c17589bae1d72a0d1e39d80c83c1dabcd86f63ee
SSDEEP

98304:AoHNZepsSVs2Z/oexNikDBqb+9y6z593NWvQW52ivHjOLM5yol+rQPd9Wgn6hdWm:AotZgs21BRLdoQlSOLM8gYQP2m6fW9s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64b6f74489c6b6a213a431ad2d4d2ce6bf6e6bc2a07aababf7e25eeeea0f80fc

Files

64b6f74489c6b6a213a431ad2d4d2ce6bf6e6bc2a07aababf7e25eeeea0f80fc
.exe windows:5 windows x86 arch:x86

f427ec01d51b9c584dcb332a494f35bf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 4.0MB - Virtual size: 8.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE