d308bfdbb16babb4c72e5080193b3388480c2fd6d2f5ee44846b55ab8551a3ca | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d308bfdbb16babb4c72e5080193b3388480c2fd6d2f5ee44846b55ab8551a3ca
Size

9.8MB
MD5

cdc4984e1ca608d399a0f636908429f4
SHA1

d6bdac31a3ecfbefcbc0cf6eddaa0d1a67fba430
SHA256

d308bfdbb16babb4c72e5080193b3388480c2fd6d2f5ee44846b55ab8551a3ca
SHA512

468ef8aa9188e066d27106180f20a142228d80bd65668dd6a70ffbfd58da58e9a2b8a7a502810917f80119d6398e6f68b65be406c7ad1a062b5bdc1d21b7ea2d
SSDEEP

196608:HRt+Bp20su/Oywi5bskQQcCYAImydMuCMHO0FfOA7bVEKYAg8ZBM/fL80HxSkCuk:xMBY0BFwi5HQQcCWkuJFZZgI0HxSUHE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d308bfdbb16babb4c72e5080193b3388480c2fd6d2f5ee44846b55ab8551a3ca

Files

d308bfdbb16babb4c72e5080193b3388480c2fd6d2f5ee44846b55ab8551a3ca
.exe windows:5 windows x86

1ca055d7b976994da40641378f877253

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetDlgItemInt

gdi32

CreateCompatibleDC

msimg32

TransparentBlt

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHAddToRecentDocs

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetThemeSysColor

ole32

OleInitialize

oleaut32

SysStringLen

oledlg

ord9

oleacc

AccessibleObjectFromWindow

gdiplus

GdipDrawImageRectI

imm32

ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 9.8MB - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE