d36596f919e0bb9be961e778a89a9a10N | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d36596f919e0bb9be961e778a89a9a10N
Size

220KB
MD5

d36596f919e0bb9be961e778a89a9a10
SHA1

641532bddd324fc26c72bc4d5319f70ebc28d6d4
SHA256

0e45427a4ff2ea9a0878f9b9f29c18ce6c8f9d871894940c9547fbdd66b1e28e
SHA512

0015d8866a17aa88a092ff98c186d2e8dac14a092d81137e4b624a3ec78b3a54c147a3b8f98b10f2419c3712c66760fff7b8e2972c8ca260dde3f5b27b02bdde
SSDEEP

3072:YXDuRrnOOSww6SXKpB/OvGG2I/FOYxlMcnAepkzXV1MAEGo/AsuF6L5I28Lj63qO:zOG2XKa7Lgql9SXto/AUXsj6Kuqe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d36596f919e0bb9be961e778a89a9a10N

Files

d36596f919e0bb9be961e778a89a9a10N
.exe windows:4 windows x86 arch:x86

f4089fe30323b0998ab170aa1ab245a6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CreateStreamOnHGlobal

comctl32

ImageList_SetIconSize

Sections

CODE
Size: 207KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE