b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
Size

3.4MB
MD5

b61ee38a669ab08cd1311335c616d506
SHA1

2dd63f5a444ef1cef07990ac9f580e4ca5bb021b
SHA256

b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
SHA512

fb668e6059698e883b78cdde96a4070592ba872eb92886fd6e5071e541d364385d0c201f1a7658e00f72732a583e86bd14c4e2ac653ef4e1751b3fbbecb5331b
SSDEEP

49152:IOd4c0tgrBnR0DmkwDdvqi/TVu2CopMCOT4O92ZZCNw032rYrabUz:IOdzlnFkQCUg91J92W72AabU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8

Files

b0e4967721f1950ccc4cbcef25a57f1b40f6751bcf9f16ef7350ae9eddfc46e8
.exe windows:4 windows x86

7482cada4e6b6caa80e405a4cd9f5593

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

CryptAcquireContextA

version

GetFileVersionInfoA

wsock32

WSAAsyncGetHostByName

winspool.drv

ClosePrinter

comctl32

FlatSB_GetScrollInfo

comdlg32

GetOpenFileNameW

gdi32

AbortDoc

msimg32

AlphaBlend

shell32

SHGetFileInfoW

user32

ActivateKeyboardLayout

winmm

sndPlaySoundA

ole32

CLSIDFromProgID

oleaut32

CreateErrorInfo

gdiplus

GdiplusStartup

Sections

.text
Size: 3.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE