423f8ded9f0d9001c6b79134d1e9943c70013cb334685ee32e0d6f29f65558c0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

423f8ded9f0d9001c6b79134d1e9943c70013cb334685ee32e0d6f29f65558c0
Size

8.9MB
MD5

ef39545068494b91fbafcfcfa77ea2ff
SHA1

0f972c0303847f6653c0d3a309c64203856f7d60
SHA256

423f8ded9f0d9001c6b79134d1e9943c70013cb334685ee32e0d6f29f65558c0
SHA512

2dc6f1e59a5bc7ddc6c2a6ee475ca8e6238878759f1a313151c6df04816a1e2031a9db3de4787ad427673ac5b68e1607e71a040d18a6d53c9cff7cea5b700f40
SSDEEP

196608:sT0IGsy3uCR4PmLYC1pNqkCice2+M6AYyVTtSvs9DuY9:s4IGsCuCKmLYC1Lqu9yVTt8s9Dp9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
423f8ded9f0d9001c6b79134d1e9943c70013cb334685ee32e0d6f29f65558c0

Files

423f8ded9f0d9001c6b79134d1e9943c70013cb334685ee32e0d6f29f65558c0
.exe windows x86

ab654eed828facad94d7d5e7169657c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamClose

ws2_32

ntohl

kernel32

SetLastError

user32

ScrollWindowEx

gdi32

RoundRect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 7.8MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 984KB - Virtual size: 984KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ