b0ef0cf38ca7dbc96b64c88b0cef0b0ee4392d7477b381682c22846eed0a24a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0ef0cf38ca7dbc96b64c88b0cef0b0ee4392d7477b381682c22846eed0a24a3
Size

8.6MB
MD5

20ae81fb250303b6a50c7a9ac659b325
SHA1

163dbeb0c62f5350f6d495d733358289f92af30b
SHA256

b0ef0cf38ca7dbc96b64c88b0cef0b0ee4392d7477b381682c22846eed0a24a3
SHA512

1139ed4dc10109f97877a3f02fb6818c38a5e4f94168a1dea518c17f615005e2bd1d053be5d3c37e410654a116d13d2134f6d3c189dc44aca04148a1634f59ff
SSDEEP

196608:T3/GwLGmveX+EB/oU7zUX8nPlN6vTrA2Ck4yAjVnXyYcCzzY4m6zObR9yHA:bzto+EBd7QsnNN6nu1yIdiYcCzzY4m6+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0ef0cf38ca7dbc96b64c88b0cef0b0ee4392d7477b381682c22846eed0a24a3

Files

b0ef0cf38ca7dbc96b64c88b0cef0b0ee4392d7477b381682c22846eed0a24a3
.exe windows x86

233d426b325f951af6166b6ddf7f2bfa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CreateDialogIndirectParamA

advapi32

RegDeleteValueA

ole32

CoLockObjectExternal

oleaut32

SystemTimeToVariantTime

msimg32

TransparentBlt

shlwapi

PathRemoveFileSpecW

uxtheme

OpenThemeData

winmm

PlaySoundA

gdiplus

GdiplusStartup

oleacc

LresultFromObject

imm32

ImmGetContext

gdi32

SetWindowExtEx

winspool.drv

ClosePrinter

shell32

ShellExecuteA

Sections

.text
Size: 8.6MB - Virtual size: 13.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE