5c8a4a7ad471dcbcd9afaf60e7a726aee4a6a9e3ecc8faf7266b14bb4514464a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5c8a4a7ad471dcbcd9afaf60e7a726aee4a6a9e3ecc8faf7266b14bb4514464a
Size

1.2MB
MD5

93c95bf7862afe5aaabec8f44fe98e63
SHA1

5dde5f9629ecc88c962c4c5cdf2a3bb42ddce450
SHA256

5c8a4a7ad471dcbcd9afaf60e7a726aee4a6a9e3ecc8faf7266b14bb4514464a
SHA512

31864b71ef984fdc03cf78f0964ba16099a3617b5e11a9f3096af38d066e06021746a58eb1f0bff454df530babf61810544691df3b2c0ad33f9f3198ab50d01e
SSDEEP

24576:QZT6VnIRiRZ1LSGpJTHH3g6vHvtf7t+UY5ve6sHwvdmBio0QfAZwq:Q6aR8BbXT1ffY9f4wFmG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c8a4a7ad471dcbcd9afaf60e7a726aee4a6a9e3ecc8faf7266b14bb4514464a

Files

5c8a4a7ad471dcbcd9afaf60e7a726aee4a6a9e3ecc8faf7266b14bb4514464a
.exe windows x86

76044d9a4872366c43a1f3c1563bb38d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc

user32

PostThreadMessageA

gdi32

GetStockObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

comctl32

ImageList_GetImageCount

oledlg

ord8

ole32

OleInitialize

olepro32

ord253

oleaut32

SysFreeString

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 192KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ