3143ca50a492dd2eb3cbad244b545fc82dfa44c717face0c3146bdcbf12e279b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3143ca50a492dd2eb3cbad244b545fc82dfa44c717face0c3146bdcbf12e279b
Size

3.5MB
MD5

2e65ecf0ac2ffda20d59008b17598d8c
SHA1

0fd723b35671d35bd73ab0c774298aab0c4b633d
SHA256

3143ca50a492dd2eb3cbad244b545fc82dfa44c717face0c3146bdcbf12e279b
SHA512

47a3270bb5886a33fb939f3d0810a60479614a61128f25f3ae75e48d9caf1ca5296d4d72133d0e755ad0a22e99b5c4be20f2640c6a6bd31f6791db333cdc4dfa
SSDEEP

98304:g7TutNJXBWMGk/Z08MSZ81ply2FTNLMjVGg:cT2JEk/ZY0wlyATNLMjYg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3143ca50a492dd2eb3cbad244b545fc82dfa44c717face0c3146bdcbf12e279b

Files

3143ca50a492dd2eb3cbad244b545fc82dfa44c717face0c3146bdcbf12e279b
.exe windows:4 windows x86

691015b925841ad138c8dabe6d23a67f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

SetFilePointer

user32

GetWindow

gdi32

PtVisible

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

OleRun

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ