c6de28f806e4e51653c0974a4b28fd44000ad5533e50e48182f7c57f32c78c11 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c6de28f806e4e51653c0974a4b28fd44000ad5533e50e48182f7c57f32c78c11
Size

8.0MB
MD5

dc3c867791715c53351498d8ef16651e
SHA1

2ab9d5143270677a406630447544476014c067f9
SHA256

c6de28f806e4e51653c0974a4b28fd44000ad5533e50e48182f7c57f32c78c11
SHA512

2257a09b20a2bcd00c93ba82c1059210ab09155c2c663a2d997ef1736c202d61302b008b23dc551cda92fa06380595918fff34f5162a19c56949c03b38c29f59
SSDEEP

196608:DegfN6ImvqqOW5Lv6DUSq1D3lG5T3v3umNUW7oi7DC3zqZ:DeAe5qhcaD9G3zq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c6de28f806e4e51653c0974a4b28fd44000ad5533e50e48182f7c57f32c78c11

Files

c6de28f806e4e51653c0974a4b28fd44000ad5533e50e48182f7c57f32c78c11
.exe windows:5 windows x86

5f8237dd41392e742b75775d3f226a21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadMenuA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

SHBrowseForFolderA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW

uxtheme

GetThemeColor

ole32

CoRegisterClassObject

oleaut32

LoadTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateBitmapFromHBITMAP

oleacc

LresultFromObject

imm32

ImmGetContext

Sections

.text
Size: 8.0MB - Virtual size: 10.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE