a5cc9cc3bc0a28d0cc13c48500e2cc83e7827e56d2941eeac33b6aa9de6cb02b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a5cc9cc3bc0a28d0cc13c48500e2cc83e7827e56d2941eeac33b6aa9de6cb02b
Size

9.0MB
MD5

5bbb7e01fe87842e97c3a7fc68420438
SHA1

1ac1ff313cfbee3e7349756af247c8017c681c77
SHA256

a5cc9cc3bc0a28d0cc13c48500e2cc83e7827e56d2941eeac33b6aa9de6cb02b
SHA512

bde52fa9a158952b5e088273273be82d7090ed9f18024fd96620b3d92a7d6c04163aea66a5d27a069d0b04f7c31eb3e8e07f547b2143fe4cfaf16dfb020719bb
SSDEEP

196608:i8CWdWETSpkuQtKYprI/mCmgIl0DQaKhy/Kr1zrEmpDEZzCOvPLsir:i9IWkbtKpAP+teb1zrEmmos

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a5cc9cc3bc0a28d0cc13c48500e2cc83e7827e56d2941eeac33b6aa9de6cb02b

Files

a5cc9cc3bc0a28d0cc13c48500e2cc83e7827e56d2941eeac33b6aa9de6cb02b
.exe windows x86

17bf675c29b8c3d41e1510214131ac26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

HideCaret

advapi32

RegOpenKeyExA

ole32

OleCreateMenuDescriptor

oleaut32

VariantClear

msimg32

TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA

winmm

PlaySoundA

gdiplus

GdipGetImageWidth

oleacc

CreateStdAccessibleObject

imm32

ImmReleaseContext

gdi32

CreateRectRgnIndirect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA

Sections

.text
Size: 8.9MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE