2d90dfd91bd2f3af5b242e070d98bd107b4be9ef422cc7a7eb07508635d71b32 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2d90dfd91bd2f3af5b242e070d98bd107b4be9ef422cc7a7eb07508635d71b32
Size

1.2MB
MD5

b2d4a66e44545d520d0d84d3a5f73935
SHA1

d769203839763d30816245176e5723efbda2f052
SHA256

2d90dfd91bd2f3af5b242e070d98bd107b4be9ef422cc7a7eb07508635d71b32
SHA512

940f5632edad9a4d3f1e0fdde1c069e8115066ebe5e4798377b244b78a5d4ad8ee06a2fe4f1c69a87ba7f915f03e8157cb55ca9c2988f9068acd079a5d414c5d
SSDEEP

24576:qWJju3pc9F658ZDPnV9mcwFczDAyOQzxzn4ZHrGOo06t8ZY:qWMK9F3DPfWuOmUeGY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d90dfd91bd2f3af5b242e070d98bd107b4be9ef422cc7a7eb07508635d71b32

Files

2d90dfd91bd2f3af5b242e070d98bd107b4be9ef422cc7a7eb07508635d71b32
.exe windows x86

76044d9a4872366c43a1f3c1563bb38d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

PostThreadMessageA

gdi32

GetStockObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

ImageList_GetImageCount

oledlg

ord8

ole32

OleInitialize

olepro32

ord253

oleaut32

SysFreeString

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 192KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ