e93a44e90879ea1da55ca58868be1de9aeb54b9bddece878d893ecbd1550e1d8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e93a44e90879ea1da55ca58868be1de9aeb54b9bddece878d893ecbd1550e1d8
Size

7.2MB
MD5

7e13048c26194f7ed8ae675683967980
SHA1

4ef981bc1e72a92dc424349cf9df5a752b897b8e
SHA256

e93a44e90879ea1da55ca58868be1de9aeb54b9bddece878d893ecbd1550e1d8
SHA512

7ba97b744f754c379cd68f6317dd3289c06ac3163e9feb937447319bfa08742c36dc721f3458b550f4b29530b75533495fed2e827b15150fe49546dba3ee69e2
SSDEEP

196608:cSrTcep36Iydc1IAxHbG6rjYXL0EQDh31QQf:/ce16IzeANC6PY1QDhFQM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e93a44e90879ea1da55ca58868be1de9aeb54b9bddece878d893ecbd1550e1d8

Files

e93a44e90879ea1da55ca58868be1de9aeb54b9bddece878d893ecbd1550e1d8
.exe windows:4 windows x86

892a7752c3d5247362dd6ea88e8665ae

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

SafeArrayAccessData

comctl32

ImageList_Read

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 610KB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE