ca56968756dd8284341ed4b1036141fa56bef92e8197555bd3dc0be925d44d46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca56968756dd8284341ed4b1036141fa56bef92e8197555bd3dc0be925d44d46
Size

4.3MB
MD5

a9c8827071a6169babec14ec77c447b2
SHA1

96da89fb50d462d6b0ef91bd96614e5fa9c81497
SHA256

ca56968756dd8284341ed4b1036141fa56bef92e8197555bd3dc0be925d44d46
SHA512

e0410852b5368e328e90f26269f42c537f5c7d8d6a79474ba5783fa1731438ebb859c96a9105be230bd4a995e4e572b3ea407958262ba629ac2d6ac737c4b8d9
SSDEEP

98304:KUPR+v8FpVOt6WOCqjfPweZwZCMxxx+1NWYiNARZCnQ:KU5BbVoPqjfPw1Vx7cWYiDnQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ca56968756dd8284341ed4b1036141fa56bef92e8197555bd3dc0be925d44d46

Files

ca56968756dd8284341ed4b1036141fa56bef92e8197555bd3dc0be925d44d46
.exe windows x86

b622a6d33d76b457d2c1906429f21fce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

socket

kernel32

GetFileSize

user32

GetSystemMenu

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetIcon

comdlg32

ChooseFontA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.8MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ