4f2ae9706bc999a17dc690c21e683da0ab03b29822a3fab567a7168c370f3e09 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f2ae9706bc999a17dc690c21e683da0ab03b29822a3fab567a7168c370f3e09
Size

9.7MB
MD5

1386fac91b89b85d77b942311e9600c2
SHA1

a723d409175e39cf466e812de6059e8a3644f9e7
SHA256

4f2ae9706bc999a17dc690c21e683da0ab03b29822a3fab567a7168c370f3e09
SHA512

fc1f1abae68a12638bf90ab9f74e5f8317e2405bce926860f4cd7a40408c3efd5ed4a78a2b455eccdf3394c2c57fe2c07230f70e36dbb2186eb769ee718fb60d
SSDEEP

196608:/YZR8H3rCbu8A5M1YVyP5NrmIJ14RnD+pZAW1KmlbR:/YZe3ycmYVyrmrSZxbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f2ae9706bc999a17dc690c21e683da0ab03b29822a3fab567a7168c370f3e09

Files

4f2ae9706bc999a17dc690c21e683da0ab03b29822a3fab567a7168c370f3e09
.exe windows:5 windows x86

1ca055d7b976994da40641378f877253

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetDlgItemInt

gdi32

CreateCompatibleDC

msimg32

TransparentBlt

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHAddToRecentDocs

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetThemeSysColor

ole32

OleInitialize

oleaut32

SysStringLen

oledlg

ord9

oleacc

AccessibleObjectFromWindow

gdiplus

GdipDrawImageRectI

imm32

ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 9.7MB - Virtual size: 14.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE