a8c7109476190b37b3e62a9b6b3b7e858abfd3c71bc7756f55039aa2a076a5e0 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a8c7109476190b37b3e62a9b6b3b7e858abfd3c71bc7756f55039aa2a076a5e0
Size

2.7MB
MD5

67c8b7b6c88c941a158c96abccf9bbb1
SHA1

eed3bfaa697643f96420bdb63067b265667bc748
SHA256

a8c7109476190b37b3e62a9b6b3b7e858abfd3c71bc7756f55039aa2a076a5e0
SHA512

c8b9ff95267d1a1957d612a4328771074ae3ce2d8cf212f68c4a97a3978b18d69d902b6b7cfbfb60764c7623154588a1fce201c72d8873758eea83026b2cb9f7
SSDEEP

49152:JReNv8Tuf6SB7wrUSqhboP1IjX9Z3XzDtkGPEZ7GK/ZzLn7hjyIN5gFDGK1:JivYufOrUSIboPAX9JftfiyAZ/zr92

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a8c7109476190b37b3e62a9b6b3b7e858abfd3c71bc7756f55039aa2a076a5e0

Files

a8c7109476190b37b3e62a9b6b3b7e858abfd3c71bc7756f55039aa2a076a5e0
.exe windows:4 windows x86

21c432fa67538f4fa2c575ad9ff5eefb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UpdateColors

version

VerQueryValueA

olepro32

OleLoadPicture

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

imm32

ImmSetCompositionWindow

shell32

ShellExecuteExA

winspool.drv

SetFormA

comdlg32

PrintDlgA

oleacc

LresultFromObject

winmm

sndPlaySoundA

setupapi

SetupDiDestroyDeviceInfoList

hid

HidD_FlushQueue

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 2.6MB - Virtual size: 10.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 97KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE