b1fc698f27d611fa03a41f971367434bea397c5903fad7af67c617ed416d67af | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b1fc698f27d611fa03a41f971367434bea397c5903fad7af67c617ed416d67af
Size

14.2MB
MD5

1673e39f4b51992ad10891983435a26f
SHA1

7e947fca269d4c3162b4294c66f6e57ca3b348f8
SHA256

b1fc698f27d611fa03a41f971367434bea397c5903fad7af67c617ed416d67af
SHA512

1de6403f18e5835a65aac011b5248ae3a608194972fb8976c9d1268115059c7bce09d1df2a710c343dd41fef260729604f7af42db7954d6c7190236b7afcf374
SSDEEP

393216:PbhMlApEV+qJBbhzXJfWLvYUAg5zFJUUQxp6L7/AW70mhWHG:Pd6ApE3JfAAeJU4nop3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b1fc698f27d611fa03a41f971367434bea397c5903fad7af67c617ed416d67af

Files

b1fc698f27d611fa03a41f971367434bea397c5903fad7af67c617ed416d67af
.exe windows:4 windows x86

663810e1fa5b87d94b50c2209a69a4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE