5b98ff8dcc5af4fdb7e4bed7c140f6a4e9d93b15cc2791aa01ab2a3d627aaaf8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5b98ff8dcc5af4fdb7e4bed7c140f6a4e9d93b15cc2791aa01ab2a3d627aaaf8
Size

11.2MB
MD5

f7acee1cc7b63591b2d634cb21f2d168
SHA1

b4214e04543b249e3d67cb5c68ef70258c119445
SHA256

5b98ff8dcc5af4fdb7e4bed7c140f6a4e9d93b15cc2791aa01ab2a3d627aaaf8
SHA512

04a8c921bff1d48f99bcdd3640bbe8468eb506f621bc2a02e9b898005b5df5875c7f0516c5286f01f04d4b9c19420ad15c5e0e2bf5f97ba6380df5d8b0f4783f
SSDEEP

196608:jpPaI0j0GGXh1toX6qfG5Ccp88iRnADNEiGBzWMOTgG1PFzj:jpzxGgdoX6dp18iNEioz8Tg+j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b98ff8dcc5af4fdb7e4bed7c140f6a4e9d93b15cc2791aa01ab2a3d627aaaf8

Files

5b98ff8dcc5af4fdb7e4bed7c140f6a4e9d93b15cc2791aa01ab2a3d627aaaf8
.exe windows x86

432fc55f13f2f44d1365d832cb8bcac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

GetClipboardData

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

SHGetSpecialFolderPathA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Create

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 4.1MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE