2ab70e87edad957a0398fe832b70f9a9d992426bcaae2fd7fc3869487550ad39 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2ab70e87edad957a0398fe832b70f9a9d992426bcaae2fd7fc3869487550ad39
Size

1.2MB
MD5

43b912099d4178a43195bcc66fcff04a
SHA1

0dffd4ef1a17fedb0b96ace73d1cda7185d792d6
SHA256

2ab70e87edad957a0398fe832b70f9a9d992426bcaae2fd7fc3869487550ad39
SHA512

daff32f7e3c08c47b463b501dddc2ec9eec5992cd437119d46bf815b7aaa98ae04c3c966bef52bcee373f1c60866ac208b62e8dfdb02644345644a25b9a2c9b3
SSDEEP

24576:IAmuewrWLb6LrBtIBkB/Qm9FcSZ/Ut1Ve5SYxkt08Z4R5Qo9Ng:IAmuewrWLbmJYm9FcK2VqSYxwZ4PQo0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ab70e87edad957a0398fe832b70f9a9d992426bcaae2fd7fc3869487550ad39

Files

2ab70e87edad957a0398fe832b70f9a9d992426bcaae2fd7fc3869487550ad39
.exe windows x86

76044d9a4872366c43a1f3c1563bb38d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

PostThreadMessageA

gdi32

GetStockObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

ImageList_GetImageCount

oledlg

ord8

ole32

OleInitialize

olepro32

ord253

oleaut32

SysFreeString

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 192KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 968KB - Virtual size: 968KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ