3b4298404533fd788f3248beb74244b1a200717a3c9ac0ae634a8775bf57497d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b4298404533fd788f3248beb74244b1a200717a3c9ac0ae634a8775bf57497d
Size

5.1MB
MD5

c3c950e4ac17a4d05c201d54d9356f59
SHA1

885b6e86083ea70bd74085566d8900a6344bda71
SHA256

3b4298404533fd788f3248beb74244b1a200717a3c9ac0ae634a8775bf57497d
SHA512

66bdfcd2f7c4c3e0b69a9edb10ebd760cdf830436b22f6d52a73efc2268a14ca8102c09c75730b8216eaff8dbfbec4d6a3501d3bc568fb8a3d945f31ccce26f0
SSDEEP

98304:3cxwTCl1S9x2cE08gH2mEIIA53RaFBOPIwFT6pr0icygHqK3Bl:3cxTckmRaMdnhygKib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b4298404533fd788f3248beb74244b1a200717a3c9ac0ae634a8775bf57497d

Files

3b4298404533fd788f3248beb74244b1a200717a3c9ac0ae634a8775bf57497d
.exe windows x86

9a3c58592026130c5c65aecfdf9f7e4b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

socket

user32

EnumDisplaySettingsA

gdi32

LineTo

winspool.drv

OpenPrinterA

comdlg32

ChooseColorA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_GetImageCount

Sections

.text
Size: 5.1MB - Virtual size: 6.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE