c65bffd0d5fffcfab1f99138fbbb121d408edb2355218266f6fe851e88351dfe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c65bffd0d5fffcfab1f99138fbbb121d408edb2355218266f6fe851e88351dfe
Size

4.8MB
MD5

aed11aa084ebf982c82b657e00f68776
SHA1

bc1e03e7e44da6c28574a38ce06f03a9df924e3f
SHA256

c65bffd0d5fffcfab1f99138fbbb121d408edb2355218266f6fe851e88351dfe
SHA512

b4cd017c729b2332142c7cba37d0230755e22a45268f842357c1d3981114ad54e32271e2e6b21190db28383a9f1be6f0246daadcfa6f31e2d4f786dc0fd5a2c1
SSDEEP

98304:BlHaP3dhqc5rLnqxs1ksq4QDjW1b3w8l8v6dY4CYpWyuW:BlHan7RnqxsCsq40A3J6v6d1pp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c65bffd0d5fffcfab1f99138fbbb121d408edb2355218266f6fe851e88351dfe

Files

c65bffd0d5fffcfab1f99138fbbb121d408edb2355218266f6fe851e88351dfe
.exe windows:4 windows x86

bef6f3f6a3a50131049e214b1ab81eea

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

WaitForInputIdle

gdi32

GetNearestPaletteIndex

winmm

midiStreamClose

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SysAllocString

comctl32

ImageList_SetBkColor

ws2_32

WSACleanup

comdlg32

ChooseColorA

Sections

.text
Size: 4.8MB - Virtual size: 6.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE