f6905dcb70412e34d3c8ebd485013b726629667a413a99bea5c2b1d41d7de39c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f6905dcb70412e34d3c8ebd485013b726629667a413a99bea5c2b1d41d7de39c
Size

9.0MB
MD5

a997b77bcdaf624a296d5d4423dd0114
SHA1

b9259d4bed3c769ee74faae8322e049695629546
SHA256

f6905dcb70412e34d3c8ebd485013b726629667a413a99bea5c2b1d41d7de39c
SHA512

6073b913e6fe10ca710b5e404285f8de25504d14b185ce4ced2558c27e784be1aedcf546b9dc782d370142cacba806a9c964d81baa7155fbfafd79e26e9334b6
SSDEEP

196608:/RlvcytxNsLB5+54Id2GAphg9u2Cvrqjp4DTh2L3vXJUQFfjltb:/Rlvc4bsLBU5F4G59ErI2DAveufjzb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f6905dcb70412e34d3c8ebd485013b726629667a413a99bea5c2b1d41d7de39c

Files

f6905dcb70412e34d3c8ebd485013b726629667a413a99bea5c2b1d41d7de39c
.exe regsvr32 windows x86

874efdd5f77f75307288bab20855d170

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

UpdateLayeredWindow

gdi32

GetTextExtentPoint32W

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

GetJobA

advapi32

OpenThreadToken

shell32

SHAppBarMessage

comctl32

ImageList_GetIconSize

shlwapi

PathFindExtensionA

ole32

OleSetContainedObject

oleaut32

VariantClear

oledlg

ord8

urlmon

CreateURLMoniker

winmm

PlaySoundA

gdiplus

GdipGetImagePixelFormat

oleacc

LresultFromObject

imm32

ImmReleaseContext

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 9.0MB - Virtual size: 16.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE