96b9c68077889517dde1b7c4ddfd4f2ae8d9fda4daf934af9f9a391c91675f9f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

96b9c68077889517dde1b7c4ddfd4f2ae8d9fda4daf934af9f9a391c91675f9f
Size

8.5MB
MD5

ba8cd7d70e0989250d5e616e8423e315
SHA1

2f25a284c8439f0fb581e9afbe25e458581fc1ad
SHA256

96b9c68077889517dde1b7c4ddfd4f2ae8d9fda4daf934af9f9a391c91675f9f
SHA512

70ba4bf82409c2ffea38abda1810118f3d340b1136d638eef061d360ad1db4caee5d41d39690a7058999e7a633701b53965a33226195ca8418a28978f6e33450
SSDEEP

196608:OghG6VQ3zAR597/Ao3DSmXtM3NkFf/3CP70o1UQVXEBcbc7U:zhGmz9Mo32ikEyzfV0Bcq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96b9c68077889517dde1b7c4ddfd4f2ae8d9fda4daf934af9f9a391c91675f9f

Files

96b9c68077889517dde1b7c4ddfd4f2ae8d9fda4daf934af9f9a391c91675f9f
.exe windows x86

17bf675c29b8c3d41e1510214131ac26

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

HideCaret

advapi32

RegOpenKeyExA

ole32

OleCreateMenuDescriptor

oleaut32

VariantClear

msimg32

TransparentBlt

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA

winmm

PlaySoundA

gdiplus

GdipGetImageWidth

oleacc

CreateStdAccessibleObject

imm32

ImmReleaseContext

gdi32

CreateRectRgnIndirect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

shell32

SHGetFileInfoA

Sections

.text
Size: 8.4MB - Virtual size: 10.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE