c9c17239c01198c3b3e3725f10a1cbabb8e8ac7c47de48f68f8cc3a0d3b1e7d5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c9c17239c01198c3b3e3725f10a1cbabb8e8ac7c47de48f68f8cc3a0d3b1e7d5
Size

2.1MB
MD5

c75d37c53e14e4b2821f45cc4d00b3f6
SHA1

e39ef610b8d2dad98e66f1c3885df9975b797852
SHA256

c9c17239c01198c3b3e3725f10a1cbabb8e8ac7c47de48f68f8cc3a0d3b1e7d5
SHA512

39668c02cfc1531378615c35a35b0a37e171eaf4d7d5f99aab4d09f62898d131fb163e2065ba1b0d52df2fef2e1e069e91101191d66cce9bc4f696fe745d2929
SSDEEP

49152:0VnE/ZCXq1rF94/e0YhbqT92k/KNv2MssrYUDGPM:+YCXSzJpqT92k/y2wYUDGPM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9c17239c01198c3b3e3725f10a1cbabb8e8ac7c47de48f68f8cc3a0d3b1e7d5

Files

c9c17239c01198c3b3e3725f10a1cbabb8e8ac7c47de48f68f8cc3a0d3b1e7d5
.exe windows x86

7559b709ff8ffb1da6230ed153d25b6a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

UnhandledExceptionFilter

user32

IsZoomed

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_Add

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 544KB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ