e3c157e090123d4c70989c92482220ff18215bd718afec7b7f6e7cc59da9ed00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e3c157e090123d4c70989c92482220ff18215bd718afec7b7f6e7cc59da9ed00
Size

1.6MB
MD5

957028dcf8485b1375f2aeae5c4257d6
SHA1

e4f3458395931bcfcb85de1b909947917a2383ea
SHA256

e3c157e090123d4c70989c92482220ff18215bd718afec7b7f6e7cc59da9ed00
SHA512

29a039f40997d7fa3354fa67a414d3143f26ecb85344094f3f5d3f85ac73bb3f54aa18bf24f65cbf789a3c17a4868b207361831135c48e206211a1f63adb8149
SSDEEP

49152:rMp/VBV5T9V1WETWxrUSDFnbjG0tqtneMCFi0yvssp4u:O/LV5pGEcrUCnbjtqFeM90y0sp4u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e3c157e090123d4c70989c92482220ff18215bd718afec7b7f6e7cc59da9ed00

Files

e3c157e090123d4c70989c92482220ff18215bd718afec7b7f6e7cc59da9ed00
.exe windows:4 windows x86

58c00d959411ad7b3730fac0d23c7cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

PeekMessageA

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 528KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ