abc4805c7ac38632c75d2ebf3bbe3b8a9acfa860a976903ecaf4f98ccf8cb241 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

abc4805c7ac38632c75d2ebf3bbe3b8a9acfa860a976903ecaf4f98ccf8cb241
Size

11.7MB
MD5

fc72be524cf60e2f1746e2eafb5ebc6f
SHA1

4f6bcf6623ec59e688afe624d3d06100fa961a36
SHA256

abc4805c7ac38632c75d2ebf3bbe3b8a9acfa860a976903ecaf4f98ccf8cb241
SHA512

f438360a5f24c85907113e489247d80ba9310e1dec2a1d1edcf8ed50b8b111c2c5a4f66eb5ef7b4edf67824e948cce0e604784506c0892f9cb2eb63bbee59730
SSDEEP

196608:PYArlhMb5hrGpEkg+qdZguBbTH3ptlHaIGtg337SCbQm9ivsRvJR3o+KWerg0BuI:PbhMlApEV+qJBbzjZitg337DbvbNYae/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abc4805c7ac38632c75d2ebf3bbe3b8a9acfa860a976903ecaf4f98ccf8cb241

Files

abc4805c7ac38632c75d2ebf3bbe3b8a9acfa860a976903ecaf4f98ccf8cb241
.exe windows:4 windows x86

663810e1fa5b87d94b50c2209a69a4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE