8913df0d50be11941a5b339d51b0e0691aebb8f50b54395a06747695d6d5f8f6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8913df0d50be11941a5b339d51b0e0691aebb8f50b54395a06747695d6d5f8f6
Size

6.6MB
MD5

114f5a6787c460ab98bbf2fb4ed2a76d
SHA1

fbba29cf927823d722e689c93515092cd57a70af
SHA256

8913df0d50be11941a5b339d51b0e0691aebb8f50b54395a06747695d6d5f8f6
SHA512

189e8816a7faa8d3979a4a670d322a6ee541bce127996cd6771fa17bd2759b00dfa0f8ffba24c4263550fba505932061905beb13e497cf3b409791f95a1711f8
SSDEEP

196608:MdxLqN5ckZzOQG7JmIdgbtRSIi03U0DKEAJQh7D:cxLqEo6Bdgx+cA2h7D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8913df0d50be11941a5b339d51b0e0691aebb8f50b54395a06747695d6d5f8f6

Files

8913df0d50be11941a5b339d51b0e0691aebb8f50b54395a06747695d6d5f8f6
.exe windows:4 windows x86

a6432f014c33b540fad875d95c291522

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetACP

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegSetValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

SafeArrayGetUBound

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 5.4MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ