3b0bdf2aaa9470c497f9a2069e01718f653c93a222d480eaee52912841b6977f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

3b0bdf2aaa9470c497f9a2069e01718f653c93a222d480eaee52912841b6977f
Size

12.8MB
MD5

ffd6cf3f24d39e0b04aade00d7a53dc7
SHA1

c88df0d14168214585cc10f8afc919abac89363c
SHA256

3b0bdf2aaa9470c497f9a2069e01718f653c93a222d480eaee52912841b6977f
SHA512

c0d2852c924729d1842fdfca1ee24ba85d5929a8609f0e3dd0a4c942a0eb2622411eb13bcaf9f4472772b094bf67fd37a45589754866beaa5c47c8507b2f4c78
SSDEEP

196608:PIxB3Qyp11H1OTw0RbT2V33jsfmpEtmpDF6yjXIjKz4gyFi5aAvzETLhoWB31ojJ:Av3jleR03jsJ8F638GWjNMoaWJDHDz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3b0bdf2aaa9470c497f9a2069e01718f653c93a222d480eaee52912841b6977f

Files

3b0bdf2aaa9470c497f9a2069e01718f653c93a222d480eaee52912841b6977f
.exe windows:4 windows x86

663810e1fa5b87d94b50c2209a69a4b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamRestart

ws2_32

select

user32

wsprintfA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SafeArrayAccessData

comctl32

ImageList_Duplicate

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 3.9MB - Virtual size: 5.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE