4e746921262aeb133e62404654829549d417928acc567db3dea48a9f68028c28 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e746921262aeb133e62404654829549d417928acc567db3dea48a9f68028c28
Size

12.0MB
MD5

adf912c46adaaf6d27591e0ac43bd768
SHA1

e00830b3989a7ab33a629e841c0bdf190f1058fa
SHA256

4e746921262aeb133e62404654829549d417928acc567db3dea48a9f68028c28
SHA512

5d049c802fb9393c9c8bee09c3d409c0a1541150d46f3308f476206db2e62be9c364f03e73b164ec321b9268d031ff662e702fee5b8623a10a7765f72a484f51
SSDEEP

196608:rtkWMrjrL3xYcZb/XWQDulaOhah8SQOlNxJW2feESWRgSBb6Vyq59xDiyTv:xkVnfxYO7XpDujah3nlNxJW22aR2h9Tv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e746921262aeb133e62404654829549d417928acc567db3dea48a9f68028c28

Files

4e746921262aeb133e62404654829549d417928acc567db3dea48a9f68028c28
.exe windows x86

bc2d5b9f917870c52bcebe5f75a12c3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetFileSize

user32

GetMenu

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 10.6MB - Virtual size: 19.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.m
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ