756939984c11d6a61bb508057231b38097e3e4b42df8d269e2ff4ed09bbbe7f7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

756939984c11d6a61bb508057231b38097e3e4b42df8d269e2ff4ed09bbbe7f7
Size

1.4MB
MD5

b9cb522cd4879fea2b059a0ef8132cbd
SHA1

87de1d26bdecafdb3e10f305f104a644c064aa03
SHA256

756939984c11d6a61bb508057231b38097e3e4b42df8d269e2ff4ed09bbbe7f7
SHA512

df36fb29208f0688f81fa23e8a3899b1186a0a64e3950476bb66004cd267b3e166506596ea9c06140fa9b28dc9a7a31c143e69917286327529c449a1aedee710
SSDEEP

24576:XhhDy/Ow0xGfxluMIeUhoIC4OULYkNE2xhhEli56pylQIAJz:RhDy/T0QlVUoIC4TZVu86pylfQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
756939984c11d6a61bb508057231b38097e3e4b42df8d269e2ff4ed09bbbe7f7

Files

756939984c11d6a61bb508057231b38097e3e4b42df8d269e2ff4ed09bbbe7f7
.exe windows x86

dc6f6cf6f243f39589ba7085c299c229

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess

user32

LoadIconA

gdi32

ExtTextOutA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 464KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 992KB - Virtual size: 992KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ