2a564a724610b809e095547a2e906f7b2d4e750194a033a6713be62a31878a8dN | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2a564a724610b809e095547a2e906f7b2d4e750194a033a6713be62a31878a8dN
Size

315KB
MD5

18844db74772fbeac130a56ebf857d90
SHA1

74296db3185ad7197a67932aece6d11946d4aed9
SHA256

2a564a724610b809e095547a2e906f7b2d4e750194a033a6713be62a31878a8d
SHA512

c6c64982ec2b98f82cb48284f346996a43f8ebabb235e4c9b595138c2fc3a52b57e148e1d3a4c1d1ed31fd67df32fb919b202d320519faa5c9fd41ae5e2e31ad
SSDEEP

3072:kXDXL0Bvnj+QF6WiGLjTDJzyWdt3o6VHMap3j8PZ9wi9kPnfIP8R8jkgR:kXDXL0BvnjbJDB7VHMkzQB9qnrOke

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2a564a724610b809e095547a2e906f7b2d4e750194a033a6713be62a31878a8dN

Files

2a564a724610b809e095547a2e906f7b2d4e750194a033a6713be62a31878a8dN
.exe windows:4 windows x86 arch:x86

f0c81b6f8530eba9d7b8894954822d1c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueA

comctl32

_TrackMouseEvent

shell32

Shell_NotifyIconA

Sections

.text
Size: 150KB - Virtual size: 440KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE