a1f66e1e86452873400c017aae316993e0f17dffca6259b92f95f4fc11a9917d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a1f66e1e86452873400c017aae316993e0f17dffca6259b92f95f4fc11a9917d
Size

1.2MB
MD5

03b0f6c7af54b5acc26c5d44b3883860
SHA1

f31dfabff0c2b4ff47f4a451bdd94accb7c51cb8
SHA256

a1f66e1e86452873400c017aae316993e0f17dffca6259b92f95f4fc11a9917d
SHA512

ab0125fb422b9b6828d1672883299a55e15693c0d6aef6ef2e6873aa3c6f20b168b984f8826b8bb47016b8bf639c1992abcc40cda3277821a65e3075a65c8582
SSDEEP

24576:QZpBcYXNDdOc110kRJoIQb0ppC0mgfHYlBSm7I8Quxx9vX/pBlMNqoW+WH:QlvXNxOc110kAb0Egf4lB4bufFHTok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a1f66e1e86452873400c017aae316993e0f17dffca6259b92f95f4fc11a9917d

Files

a1f66e1e86452873400c017aae316993e0f17dffca6259b92f95f4fc11a9917d
.exe windows:4 windows x86

6ec3e0af9bd2249613fe42285c9d599b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetWindowsHookExA

gdi32

GetStockObject

comdlg32

GetSaveFileNameA

winspool.drv

EnumPrintersA

advapi32

RegSetValueA

shell32

ShellExecuteExA

comctl32

ImageList_AddMasked

oledlg

ord8

ole32

CoTaskMemAlloc

olepro32

ord253

oleaut32

SysAllocStringLen

odbc32

ord10

wsock32

closesocket

wininet

InternetGetLastResponseInfoA

imm32

ImmAssociateContext

Sections

.text
Size: 1.2MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE