060a1e5490b29ae2e701f0a3cd43e32f92486cd69142e6b16dea50d0325a8b9a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

060a1e5490b29ae2e701f0a3cd43e32f92486cd69142e6b16dea50d0325a8b9a
Size

1.4MB
MD5

60cda46a8347cd953940a23e0368e31b
SHA1

7112c11eafbdae200d37b6c4ee6bfb82f1a6f9f4
SHA256

060a1e5490b29ae2e701f0a3cd43e32f92486cd69142e6b16dea50d0325a8b9a
SHA512

80a651b83f7b1d1f61fe40166f8c46cdcd1bb50593dd768ca225d1a37ff37c0698f13bba1559f927b2f5b1f6bca411932ebc5c6abca58356f182a2985cb562a7
SSDEEP

24576:lLA6yaCaGRMo3zutJRm/PekzORCp+8B6ZwTdzQMAzCuCU0USfLWJ:XLkaAeyPMwThQXLW3fiJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
060a1e5490b29ae2e701f0a3cd43e32f92486cd69142e6b16dea50d0325a8b9a

Files

060a1e5490b29ae2e701f0a3cd43e32f92486cd69142e6b16dea50d0325a8b9a
.exe windows x86

72b36cee53a20939b9a8df3397911b7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

waveOutRestart

ws2_32

ntohl

user32

ScrollWindowEx

gdi32

CreateCompatibleDC

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantClear

comctl32

ImageList_Destroy

Sections

.text
Size: 1.4MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE