8b852f98db70500cb7d93e5cf0e0d3184eaa1c0df82fd00fcaa822c89dc94036 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b852f98db70500cb7d93e5cf0e0d3184eaa1c0df82fd00fcaa822c89dc94036
Size

9.2MB
MD5

fa60550d0377eef0ea9af42bf9cfbc5a
SHA1

13706cd4ad58778a687368782c353fbeb2814ec3
SHA256

8b852f98db70500cb7d93e5cf0e0d3184eaa1c0df82fd00fcaa822c89dc94036
SHA512

e032a56c580f6ce1dfd868dff61b09d20571926bf440d43982926caa07bf16a51ebd9e879ca6db75931c7fd3760f63421cd81dfce8a6b4be56ce55efcb5f7522
SSDEEP

196608:F0GpIVB97Pm/XX80m3Khwg3yzoxErYopU/6scKSq4yPdEIe5Q4ZN:bIVL7PmkX3kA0xuYopjHTw7gN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b852f98db70500cb7d93e5cf0e0d3184eaa1c0df82fd00fcaa822c89dc94036

Files

8b852f98db70500cb7d93e5cf0e0d3184eaa1c0df82fd00fcaa822c89dc94036
.exe windows:5 windows x86

5f8237dd41392e742b75775d3f226a21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadMenuA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

SHBrowseForFolderA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW

uxtheme

GetThemeColor

ole32

CoRegisterClassObject

oleaut32

LoadTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateBitmapFromHBITMAP

oleacc

LresultFromObject

imm32

ImmGetContext

Sections

.text
Size: 9.2MB - Virtual size: 11.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE