34c9413f59c950984ef22acaf108ec5599ace2ad6a537f4fdcb95ebf0db19eda | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34c9413f59c950984ef22acaf108ec5599ace2ad6a537f4fdcb95ebf0db19eda
Size

1.2MB
MD5

efbe8e85363b70ff3158e872240cda2a
SHA1

50a8174be24ed63ac02bab3153d0dc4cddeb8e6a
SHA256

34c9413f59c950984ef22acaf108ec5599ace2ad6a537f4fdcb95ebf0db19eda
SHA512

d4ccb2e35e6e5b8efc838a2c5ee0e049a4f5bba2af944685861c957e941cb4838ef8eebcda4e8f3ec2b697c076b8e26f8976a803f8f6cbedbac56a99581718e7
SSDEEP

24576:Q36HNXJwSsLDQt54i2hsxx70mWU+V6w78BWFIAVmEnqi:Q36t5l0cV2Wbh+V/3FIji

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34c9413f59c950984ef22acaf108ec5599ace2ad6a537f4fdcb95ebf0db19eda

Files

34c9413f59c950984ef22acaf108ec5599ace2ad6a537f4fdcb95ebf0db19eda
.exe windows x86

76044d9a4872366c43a1f3c1563bb38d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

PostThreadMessageA

gdi32

GetStockObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

ImageList_GetImageCount

oledlg

ord8

ole32

OleInitialize

olepro32

ord253

oleaut32

SysFreeString

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 192KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ