c8046e7730510b7edd6688db852588a44de73ab8c2bb09e1acefce774c3647a5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c8046e7730510b7edd6688db852588a44de73ab8c2bb09e1acefce774c3647a5
Size

5.2MB
MD5

26922c616378324ba871c3f1720e04ab
SHA1

77353edc3aa5375bb30cd287cc15dc113f3b214a
SHA256

c8046e7730510b7edd6688db852588a44de73ab8c2bb09e1acefce774c3647a5
SHA512

e16af0f4c72589f1ad16bf668c70e56c7c48def2888450aec588993293b827c64886793eb6bc7af82b5a0b635ed0d23cf02b9dc8380416fdca3c4a0da6ba70c4
SSDEEP

98304:fyGqZGsnMmLeP91W/hb0HyG+rGojJ4uigJ/V0hyX8:skmLeP9gpbeyGavuuigdi68

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c8046e7730510b7edd6688db852588a44de73ab8c2bb09e1acefce774c3647a5

Files

c8046e7730510b7edd6688db852588a44de73ab8c2bb09e1acefce774c3647a5
.exe windows x86

78e1fc17dbbbe915b141074eebc4d60e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

GetMessagePos

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 4.0MB - Virtual size: 9.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1008KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 228KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ