9f3cf75c3286c01a3caf84f6ddc62361bfb111001cc273b4e437b4a8fc1c66b8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9f3cf75c3286c01a3caf84f6ddc62361bfb111001cc273b4e437b4a8fc1c66b8
Size

3.5MB
MD5

6b9cc31aa94d4e41d137afc9c0084d9e
SHA1

28ad840f856e73e7a7b60b39d7048d135bcb342e
SHA256

9f3cf75c3286c01a3caf84f6ddc62361bfb111001cc273b4e437b4a8fc1c66b8
SHA512

9b74743908a11ddcd50e7204acd55896c49896a8667bba77823598e69ebc494440fd5f571843153fee5572f2d2826a32182e9a0fb0d1ba7f53cfe5629f5ebaaa
SSDEEP

98304:wZmX3TiEZw4bknbKRJAPmuuo1/J5OvYl9b39LMjVGo:ymXzknbYcmLmQveJLMjYo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9f3cf75c3286c01a3caf84f6ddc62361bfb111001cc273b4e437b4a8fc1c66b8

Files

9f3cf75c3286c01a3caf84f6ddc62361bfb111001cc273b4e437b4a8fc1c66b8
.exe windows x86

691015b925841ad138c8dabe6d23a67f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

SetFilePointer

user32

GetWindow

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.2MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ