c6624faa721228c9392317184230365c88a86566ca63442d649f7a0442922242 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6624faa721228c9392317184230365c88a86566ca63442d649f7a0442922242
Size

8.9MB
MD5

beac69687868db46ae6bd05d8baea256
SHA1

5de76b2a665faaf2140df1d8a57a22037f5e3531
SHA256

c6624faa721228c9392317184230365c88a86566ca63442d649f7a0442922242
SHA512

6725eda1c7f447560c44021e8680268fe1c0af945484ecd43ba0d00adf3a52682aa4ba0ea06ceef288c4d3efe50c1a15f5ff19f439690398baae19fe84a61145
SSDEEP

196608:ROYcyCFAwrnGbXCHY75M5EVlaZpbOdTwXccg5eQmGOFjg6Ai0r/1eSvcY:VydGbWw5M5uY5m16aUY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6624faa721228c9392317184230365c88a86566ca63442d649f7a0442922242

Files

c6624faa721228c9392317184230365c88a86566ca63442d649f7a0442922242
.exe windows:4 windows x86

ab654eed828facad94d7d5e7169657c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamClose

ws2_32

ntohl

kernel32

SetLastError

user32

ScrollWindowEx

gdi32

RoundRect

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegQueryValueA

shell32

Shell_NotifyIconA

ole32

OleInitialize

oleaut32

UnRegisterTypeLi

comctl32

ord17

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 7.8MB - Virtual size: 8.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ