963cf8e3ae344ebd9fed6f5326fff6cb23715386788c86ad806f13a949800bbe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

963cf8e3ae344ebd9fed6f5326fff6cb23715386788c86ad806f13a949800bbe
Size

1.2MB
MD5

05fb985cb08e2697ba53941abef8e30f
SHA1

04bf9f25b79c2d76507bdc1fc80c41cc12a389e2
SHA256

963cf8e3ae344ebd9fed6f5326fff6cb23715386788c86ad806f13a949800bbe
SHA512

91f36c17a1c30dd36588859a05337b1bc26c72ddb60337e42df89eacf98e234e47b7b8a23667610be14cd5c3bfa02bd8b244ca49c00c3b5a6aa4d2a6ffe12f90
SSDEEP

24576:Fq2N/1ctMJVBK8cemAG/BT78aR5t4BEeyoq8KLpGiUhw:td1ctMEXe0/BNOEe1jUplUa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
963cf8e3ae344ebd9fed6f5326fff6cb23715386788c86ad806f13a949800bbe

Files

963cf8e3ae344ebd9fed6f5326fff6cb23715386788c86ad806f13a949800bbe
.exe windows:5 windows x86

66837801ebf0594a013c7e5e598e03cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress

user32

CharUpperA

gdi32

CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA

advapi32

SetThreadToken

shell32

DragFinish

shlwapi

PathFindFileNameA

oledlg

ord8

ole32

OleIsCurrentClipboard

oleaut32

SystemTimeToVariantTime

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 315KB - Virtual size: 796KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 917KB - Virtual size: 920KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ