3a4f8c79417040384cc9226e3e26c32778aa10da20c72d53bc17bf5fc509dd69 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3a4f8c79417040384cc9226e3e26c32778aa10da20c72d53bc17bf5fc509dd69
Size

516KB
MD5

9943c0c55ec8d2b098bd3bc8a57c0900
SHA1

49f779662dc7b6f7157dc1b6f481f5f0dafce107
SHA256

3a4f8c79417040384cc9226e3e26c32778aa10da20c72d53bc17bf5fc509dd69
SHA512

b4326abd6396531e70e5ff736a714d7524704a06eeb4c6738fa9c26522cadff0a4bbb133a9dcacef78792399b0d56711ea7524ac67d5234229746af82d062b1d
SSDEEP

12288:q9uBEZygLuGz+C/0EwYa2DlK5F9O2o79v:q9ogLuJC/0ZYa2DkTQ2W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3a4f8c79417040384cc9226e3e26c32778aa10da20c72d53bc17bf5fc509dd69

Files

3a4f8c79417040384cc9226e3e26c32778aa10da20c72d53bc17bf5fc509dd69
.exe windows x86

0c518958b7874c172a92aa695c7476de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

EnableMenuItem

gdi32

LineTo

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

GetFileSecurityA

shell32

DragFinish

shlwapi

PathStripToRootA

ole32

OleDestroyMenuDescriptor

oleaut32

VariantTimeToSystemTime

version

GetFileVersionInfoA

Sections

.text
Size: 476KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE