cf97e2dc9030b6f21e135c2fbd4be0b3df4b0789a651e71af7fef4912bad0dde | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf97e2dc9030b6f21e135c2fbd4be0b3df4b0789a651e71af7fef4912bad0dde
Size

8.9MB
MD5

323cb5f31eb0f9fbf605d59ccbc987c1
SHA1

717da6a1f05a377a521f94c9a76222c664355caa
SHA256

cf97e2dc9030b6f21e135c2fbd4be0b3df4b0789a651e71af7fef4912bad0dde
SHA512

051ba743d54ab62ff9fa6cde18ab1e41a97db41e94d3ad3f336ed954d44b550e7773e0cc73259108eba01ed6ed1b7a69d751b4a8e326b68fea51eaba5b0a0cc3
SSDEEP

196608:DUA/86hU0pG+fyyemjMhbtBF+BmrVv6rCXOGNcPuiv/:DZhU8GYCvh5BAk6r4K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf97e2dc9030b6f21e135c2fbd4be0b3df4b0789a651e71af7fef4912bad0dde

Files

cf97e2dc9030b6f21e135c2fbd4be0b3df4b0789a651e71af7fef4912bad0dde
.exe windows x86

ab654eed828facad94d7d5e7169657c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamClose

ws2_32

ntohl

kernel32

SetLastError

user32

ScrollWindowEx

gdi32

RoundRect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 7.8MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 972KB - Virtual size: 972KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ