b8e87ce6443d07bfad13750c5ef2b4487aa945d27dd32cb3c8654345fe465f06 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b8e87ce6443d07bfad13750c5ef2b4487aa945d27dd32cb3c8654345fe465f06
Size

13.8MB
MD5

d4aec6d265b07c14fe99341ba44c5a35
SHA1

42b486fcacea709b7bf1f52d64d34746be7fe954
SHA256

b8e87ce6443d07bfad13750c5ef2b4487aa945d27dd32cb3c8654345fe465f06
SHA512

035e80d9966908f4925fe97d3bad097711b0a9e83c5e2cdbe64e55c65c614be458dca103a09d166782627f56cb206ce2bc426f42bbe9fac762db77974d032c6d
SSDEEP

393216:HN/V1Vhza0Htvdi8TLmB84AbwNs7BehuGDw8:tLVlTH5dZj4AEs7Beh7Dw8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b8e87ce6443d07bfad13750c5ef2b4487aa945d27dd32cb3c8654345fe465f06

Files

b8e87ce6443d07bfad13750c5ef2b4487aa945d27dd32cb3c8654345fe465f06
.exe windows x86

a6c39ea1e771a0880244dc044e984a42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

socket

rasapi32

RasHangUpA

user32

GetKeyState

gdi32

LineTo

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SysAllocStringLen

comctl32

ImageList_Draw

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 2.7MB - Virtual size: 12.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

f30c
Size: 1.3MB - Virtual size: 1.3MB