0720ff1a12751bbac0c6e59319dc321cc0e8f083cf7f6f677e26d53c8fe6b1a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0720ff1a12751bbac0c6e59319dc321cc0e8f083cf7f6f677e26d53c8fe6b1a4
Size

9.0MB
MD5

4d0e1e43d9c158ae69db3b693dcb4a4a
SHA1

34aebda95ebf289c87e715c97c4deac9f6491eec
SHA256

0720ff1a12751bbac0c6e59319dc321cc0e8f083cf7f6f677e26d53c8fe6b1a4
SHA512

656904829963b20a4b1a5c1b4ff3c2598e5245b87d7a52ce040c9aad38294d5b7a4822474875da453693d7a82e92f3fbc426392ff524840072d2777df0c2cfd8
SSDEEP

196608:LJqFNcuvdvIXDhz310SP1H30knzy1xFY3tzqOYNun70BkW9d0EyzV:LJqFNVdQXDp311X3zy7idWrN0oeSd01p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0720ff1a12751bbac0c6e59319dc321cc0e8f083cf7f6f677e26d53c8fe6b1a4

Files

0720ff1a12751bbac0c6e59319dc321cc0e8f083cf7f6f677e26d53c8fe6b1a4
.exe windows:5 windows x86

5f8237dd41392e742b75775d3f226a21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadMenuA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

SHBrowseForFolderA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW

uxtheme

GetThemeColor

ole32

CoRegisterClassObject

oleaut32

LoadTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateBitmapFromHBITMAP

oleacc

LresultFromObject

imm32

ImmGetContext

Sections

.text
Size: 9.0MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE