902af4d911ab0a19e9e7f1603f3c429517674cd9930510af52615460bface62d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

902af4d911ab0a19e9e7f1603f3c429517674cd9930510af52615460bface62d
Size

2.0MB
MD5

4714f26331100729a8673106472f82e2
SHA1

c0ad00267cf4dd7f318293bac8361e210d326757
SHA256

902af4d911ab0a19e9e7f1603f3c429517674cd9930510af52615460bface62d
SHA512

f3a608416ff34f650aa20b5119cd995edfdce3e18dc3cf91c69086a0ff4ff021786bab1604c436952173aebb00ee857850b01bd91230aca16a6fb2d45309e4dc
SSDEEP

49152:DAIjedefDZc7T9DvOKm7UHDQjtamiIA+fKjJZOYvbqy6XuzLQXK2VG5:DHC4fDZc4qHDbhbtmLXALMjVG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
902af4d911ab0a19e9e7f1603f3c429517674cd9930510af52615460bface62d

Files

902af4d911ab0a19e9e7f1603f3c429517674cd9930510af52615460bface62d
.exe windows x86

691015b925841ad138c8dabe6d23a67f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

SetFilePointer

user32

GetWindow

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 740KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ