b8d6f9c0218033d3378b9b18c21e2bd88c665e0874c40fa1547daf12f93533f2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8d6f9c0218033d3378b9b18c21e2bd88c665e0874c40fa1547daf12f93533f2
Size

8.7MB
MD5

8d9c3ed322538b733601e00bbce3ce49
SHA1

286de4e88b0845906e4d8ae79937a5b32df650cc
SHA256

b8d6f9c0218033d3378b9b18c21e2bd88c665e0874c40fa1547daf12f93533f2
SHA512

3df4eb7060e83a16d12962ef191a327b729913996169ab8c7d516ebe1c8c79715d645c70924ac4adb1f8e77741122fbe2252f910c106b31d091e3817e7692974
SSDEEP

196608:0CerS9KwirZmhECEbyWusIR9G+Ar0TolRJaq9bTdrzP+g3J4:+fmhEbZprr3lv5NSg3J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8d6f9c0218033d3378b9b18c21e2bd88c665e0874c40fa1547daf12f93533f2

Files

b8d6f9c0218033d3378b9b18c21e2bd88c665e0874c40fa1547daf12f93533f2
.exe windows x86

7d65e1c0a2156348d6597ffb2df4a472

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CreateDialogIndirectParamA

advapi32

RegDeleteKeyA

ole32

CoLockObjectExternal

oleaut32

SystemTimeToVariantTime

msimg32

AlphaBlend

shlwapi

StrFormatKBSizeA

uxtheme

GetThemePartSize

winmm

PlaySoundA

gdiplus

GdiplusStartup

oleacc

CreateStdAccessibleObject

imm32

ImmReleaseContext

gdi32

SetWindowExtEx

winspool.drv

DocumentPropertiesA

shell32

ShellExecuteA

Sections

.text
Size: 8.7MB - Virtual size: 12.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE