a014d4516870c1b59954f3ed4bb884644b4e9eff4e48b53cec07213d68caae46 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a014d4516870c1b59954f3ed4bb884644b4e9eff4e48b53cec07213d68caae46
Size

9.2MB
MD5

ecd49c4ac3b095da174afbb46d2903eb
SHA1

55a2f3c651b94616c28ed89e2422d0630cebe55e
SHA256

a014d4516870c1b59954f3ed4bb884644b4e9eff4e48b53cec07213d68caae46
SHA512

7ec01f7c22d116224d02ec1dcc4e29f39c7dadac50a69810cb60352cb0fd450912d6cbe649296a24de45d014dc59e24f56cca66461448432382d11be47849c63
SSDEEP

196608:dlAoHepeTlMlnB7LwaWmgcQQa5alkTeRs+jgvK/1n/ExyrNJ/D5vWj:Hv/MZB7BWmgVQFkyRjsy/dHJ/5Wj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a014d4516870c1b59954f3ed4bb884644b4e9eff4e48b53cec07213d68caae46

Files

a014d4516870c1b59954f3ed4bb884644b4e9eff4e48b53cec07213d68caae46
.exe windows x86

4f2698e388430cc4104663060d067bf5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

TranslateAcceleratorA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ExtractIconA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetCurrentThemeName

ole32

OleUninitialize

oleaut32

SysStringLen

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateFromHDC

oleacc

AccessibleObjectFromWindow

imm32

ImmReleaseContext

Sections

.text
Size: 9.2MB - Virtual size: 11.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE