506dd4801e31b6d9218b784def449d287eca0e4935a1a17c2fd8d35921adcfbb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

506dd4801e31b6d9218b784def449d287eca0e4935a1a17c2fd8d35921adcfbb
Size

11.4MB
MD5

674e17adfb095fbef6f6648228b95afa
SHA1

94ea6ad505299475565d2620c6f8c3cc4b6c211e
SHA256

506dd4801e31b6d9218b784def449d287eca0e4935a1a17c2fd8d35921adcfbb
SHA512

bbba2b5da29a2d98085bd641467fdba73b3808783dacc0c960783291a07b67bccac4a3abba000a0d14cb4c3f35d8dce2ad818929101580ef8a1b79028d21c582
SSDEEP

196608:fN6iRKDVuGcTEP/lDX9ojGYOVQacCLL3LeYZBAftnMGLyAUpUvANgeb991BqlAr5:fN6iQV+YhOOy8v3pTuVrvANDb991WAd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
506dd4801e31b6d9218b784def449d287eca0e4935a1a17c2fd8d35921adcfbb

Files

506dd4801e31b6d9218b784def449d287eca0e4935a1a17c2fd8d35921adcfbb
.exe windows:4 windows x86

1e8c35eba3cd0be98f1ac1c8fc97382f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetMenuItemCount

gdi32

StretchBlt

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

Sections

.text
Size: 9.9MB - Virtual size: 16.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 271KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE