b9dc5ab9e1633b7ac0665d8c803f079baac3ac49d7b405bf558318d1c40d2adb | Triage

Sharing

General

Target

b9dc5ab9e1633b7ac0665d8c803f079baac3ac49d7b405bf558318d1c40d2adb
Size

14.2MB
MD5

c568278b4c534f2c21426e4d5f4add30
SHA1

52acb86f709a84af3f190bc1cb4bb125199e03bf
SHA256

b9dc5ab9e1633b7ac0665d8c803f079baac3ac49d7b405bf558318d1c40d2adb
SHA512

61281e0adf0ee644fc0d43c71dbd20fc69f676c009d5656d8bf72773f946dfd2de1a01f80635ad646b2757a120c26542b1879870762a4006aca06b03c5ef1a20
SSDEEP

393216:PbhMlApEV+qJBbABXJfWLvYUAg5zFtUUQSA6L7/AW70mhWHIl:Pd6ApEgJfAAetU0nop3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9dc5ab9e1633b7ac0665d8c803f079baac3ac49d7b405bf558318d1c40d2adb

Files

b9dc5ab9e1633b7ac0665d8c803f079baac3ac49d7b405bf558318d1c40d2adb
.exe windows:4 windows x86

663810e1fa5b87d94b50c2209a69a4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE