5744adb1407f0c10f639b4f9472d343856589df50e6e956926661d45aa315381 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5744adb1407f0c10f639b4f9472d343856589df50e6e956926661d45aa315381
Size

7.7MB
MD5

96537a387380d0ec687ab6f8c9a809dc
SHA1

6004d17ed52dd4b345d0369e5b7896f591a30713
SHA256

5744adb1407f0c10f639b4f9472d343856589df50e6e956926661d45aa315381
SHA512

1d5072c3ed3228a40a9b496979c5607d09f591aedc4fbd294d264f873d857f47e7f4d49a52becdab7518e2ad33bd33cdc7ff78cdbf9a980a2b52fb5d16ac60aa
SSDEEP

196608:PIxB3Qyp11H1OTw0RbT2V33jEGEhh8ExSfGw1KRXtsibq0Rpt:Av3jleR03jah9SfGwgOibq0RD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5744adb1407f0c10f639b4f9472d343856589df50e6e956926661d45aa315381

Files

5744adb1407f0c10f639b4f9472d343856589df50e6e956926661d45aa315381
.exe windows:4 windows x86

663810e1fa5b87d94b50c2209a69a4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE