c192a4ef3c5959bd927e11d5a6540ad0dfa54ddf467c15149999069d34848170 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c192a4ef3c5959bd927e11d5a6540ad0dfa54ddf467c15149999069d34848170
Size

14.4MB
MD5

9dd15ee0b3a9b60fc547f7faec5dc08f
SHA1

88544251a26b17c96b075ee0ed8d203bd409d625
SHA256

c192a4ef3c5959bd927e11d5a6540ad0dfa54ddf467c15149999069d34848170
SHA512

a87d04a6863d07b0f1f25ab6481a5b758b15d24d9777e6d0d5df01eca264daf09fa5cfec23db110ee9205bb6f861cbb1905ce9b97c08d89ce3d20ccc857f0129
SSDEEP

393216:pvGzrrlx9fpGNvdG1U3JTo1hciKNM+NIdgGY6I5:lGP9fpGW1U3Jc1HJjgd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c192a4ef3c5959bd927e11d5a6540ad0dfa54ddf467c15149999069d34848170

Files

c192a4ef3c5959bd927e11d5a6540ad0dfa54ddf467c15149999069d34848170
.exe windows:4 windows x86

432fc55f13f2f44d1365d832cb8bcac4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

GetClipboardData

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

SHGetSpecialFolderPathA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Create

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 2.5MB - Virtual size: 8.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 207KB - Virtual size: 208KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE