c01c3adc6cfc19ffb1a2002e18054f3068d5282b2cdabb2be470ec28a21325f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c01c3adc6cfc19ffb1a2002e18054f3068d5282b2cdabb2be470ec28a21325f3
Size

1.3MB
MD5

75687b288815972ca9c4f615e0937d75
SHA1

426d0180570de51a1967f192c671297de6837fe2
SHA256

c01c3adc6cfc19ffb1a2002e18054f3068d5282b2cdabb2be470ec28a21325f3
SHA512

ffb6c211175f0313ce74d592b72140d65d7ee6f860bb4cbd0a0e818df7ca50c80265464e0caa2cf13c0a1dfdd201116c10676431ccaa7cce736dcd0494a059bb
SSDEEP

24576:Pt9kxxcQFhvvSjiVYM+5FUlMwpCdZSzxWtzJwE69wbHBiZfBU/anP9opEjzvrY0c:PX+6oxKjiz0Fd3ttxrEZEsP9PPvrS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c01c3adc6cfc19ffb1a2002e18054f3068d5282b2cdabb2be470ec28a21325f3

Files

c01c3adc6cfc19ffb1a2002e18054f3068d5282b2cdabb2be470ec28a21325f3
.exe windows x86

e04fa50e7662b1fd947f70aeb76ed5ab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

PeekMessageA

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 368KB - Virtual size: 844KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 960KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ