4a533d9e95c271c3a1f3aad291345e3716748d133224fc4d014a9d0708514f46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4a533d9e95c271c3a1f3aad291345e3716748d133224fc4d014a9d0708514f46
Size

8.4MB
MD5

2fd4f0b88d0c5420c6439b7ea14ad6bd
SHA1

1782aa0dd61a0d65ed4a159439241bc0f4924087
SHA256

4a533d9e95c271c3a1f3aad291345e3716748d133224fc4d014a9d0708514f46
SHA512

308150f9abff7d1c648b26b6e18b7db3268928b6d9e88e5ba5efbd7bbab1bfb60309a5152ebc52a0c2e087ec8e821539e3361515cc96f081df06c14f86c6603e
SSDEEP

196608:qlFTj1Fem9GEI/ZB5bCmjAcQtbP+8vyBsOCnA5kjBN/:qvJFbshB5WgAXtr+8KGPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a533d9e95c271c3a1f3aad291345e3716748d133224fc4d014a9d0708514f46

Files

4a533d9e95c271c3a1f3aad291345e3716748d133224fc4d014a9d0708514f46
.exe windows x86

1ca055d7b976994da40641378f877253

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetDlgItemInt

gdi32

CreateCompatibleDC

msimg32

TransparentBlt

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHAddToRecentDocs

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetThemeSysColor

ole32

OleInitialize

oleaut32

SysStringLen

oledlg

ord9

oleacc

AccessibleObjectFromWindow

gdiplus

GdipDrawImageRectI

imm32

ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 8.4MB - Virtual size: 13.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE