b875d6f8f7e77d70c207f787c769f75663edbbb3c0c26b9dac0f3b9bc78b0339 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b875d6f8f7e77d70c207f787c769f75663edbbb3c0c26b9dac0f3b9bc78b0339
Size

2.6MB
MD5

5636d9280f8d478ca672ebbf6e2515d6
SHA1

6fee5d718d0f24c7c37a5dc46a0d788fe387a8a7
SHA256

b875d6f8f7e77d70c207f787c769f75663edbbb3c0c26b9dac0f3b9bc78b0339
SHA512

cc229184164d21fc3eb34eb32265a63fb472697461b911c742f4f17cdcc15bf1f394f8c147b6e9a0ecc31c8a549d3a1a8b1ff47074f437898e7ff78fc496a3ee
SSDEEP

49152:2YaBdnsOrhdME9QyFo+VG9Ii0IOCVpiP4EB9kjXxtqgUwuFbCQVajZgpIdNB4/:3aznZrEnyF1GS47M7BJghuFbWjZg2j4/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b875d6f8f7e77d70c207f787c769f75663edbbb3c0c26b9dac0f3b9bc78b0339

Files

b875d6f8f7e77d70c207f787c769f75663edbbb3c0c26b9dac0f3b9bc78b0339
.exe windows x86

21c432fa67538f4fa2c575ad9ff5eefb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UpdateColors

version

VerQueryValueA

olepro32

OleLoadPicture

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

imm32

ImmSetCompositionWindow

shell32

ShellExecuteExA

winspool.drv

SetFormA

comdlg32

PrintDlgA

oleacc

LresultFromObject

winmm

sndPlaySoundA

setupapi

SetupDiDestroyDeviceInfoList

hid

HidD_FlushQueue

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 2.6MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE