5b8f71af71c983fbc3a7741f8eb42fef3d9a9adb89044ffcfd3ebe541a7118a8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b8f71af71c983fbc3a7741f8eb42fef3d9a9adb89044ffcfd3ebe541a7118a8
Size

3.5MB
MD5

d23b3531bd22fc6362a95928182c95cb
SHA1

e3b58585633d58c08a79dd9ccf3b51aabfd7824e
SHA256

5b8f71af71c983fbc3a7741f8eb42fef3d9a9adb89044ffcfd3ebe541a7118a8
SHA512

8fb2d4890255dcf50ccd312217184526ad78adcba404bfbb5e57c100eb95bbc7699b4aaad7954adbd2d47653040528b14c7944640003c91190e61e57b5198649
SSDEEP

49152:iv8GeZac6aaSSJ1qEQ/QfgT4pl0BXAZvCY2tbCjUn+FPDYCQ7:oe4c6aa91qEQ/0Rl0BXAZvXjUnS0l7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b8f71af71c983fbc3a7741f8eb42fef3d9a9adb89044ffcfd3ebe541a7118a8

Files

5b8f71af71c983fbc3a7741f8eb42fef3d9a9adb89044ffcfd3ebe541a7118a8
.exe windows x86

ab472bdb8dda700adcda2438dea10aca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.2MB - Virtual size: 4.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ