713a6aa08a396a44e6e1f686fe35d40ba5140d57bee1f012de749dcc2feb51a3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

713a6aa08a396a44e6e1f686fe35d40ba5140d57bee1f012de749dcc2feb51a3
Size

5.2MB
MD5

58c28b0fb52fae01c4515a2eb74ea9fb
SHA1

593a7ac842f24fb958f1bf18ee0e86e167ab2824
SHA256

713a6aa08a396a44e6e1f686fe35d40ba5140d57bee1f012de749dcc2feb51a3
SHA512

3e335c77a09cdd103c7e4aada6aeeef7823f99f04bd5d42a56f04e30de947545e0940526055ee0c322e6189b7ead6d4d587c5680ad1aca87253b4fd7cbc4938c
SSDEEP

98304:ZAIHc5ax0qwzUreIbWTIdvZUiEgqzo7VWZPahw6BfdwUp+O:ZAmIairzUyIbWT8vZagvWZPsLp+O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
713a6aa08a396a44e6e1f686fe35d40ba5140d57bee1f012de749dcc2feb51a3

Files

713a6aa08a396a44e6e1f686fe35d40ba5140d57bee1f012de749dcc2feb51a3
.exe windows x86

7c95be3ca3a5fc7e1c142aa35c7d0ce2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCurrentDirectoryA

user32

GetWindowDC

gdi32

SetTextColor

winmm

midiStreamRestart

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

htons

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 3.4MB - Virtual size: 4.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 752KB - Virtual size: 752KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ