8b5de67916676364f78a31a6e65812388b183afe3c66174dd32883b655847238 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8b5de67916676364f78a31a6e65812388b183afe3c66174dd32883b655847238
Size

7.9MB
MD5

638211e5ca3696cf197d5b47eabb8842
SHA1

cd65a161aea21def5a3f6d252127fafe57b8b5f6
SHA256

8b5de67916676364f78a31a6e65812388b183afe3c66174dd32883b655847238
SHA512

418e4560cac9efa9c82f31dc1b5fdb29971c30ad0324e394763aa24b4a00c0e6556cd947edc118bb3cf4a4b9fba09a06f0b58403b1a14e5ff42c1d92160d0d86
SSDEEP

196608:u4Ing9TG5q1zPrJQZ/Wau7NSNJx5VBQVzbl6j:2ng9Yq1G/Wp7kNDBQpl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8b5de67916676364f78a31a6e65812388b183afe3c66174dd32883b655847238

Files

8b5de67916676364f78a31a6e65812388b183afe3c66174dd32883b655847238
.exe windows:5 windows x86

5f8237dd41392e742b75775d3f226a21

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadMenuA

gdi32

GetDeviceCaps

msimg32

TransparentBlt

winspool.drv

DocumentPropertiesA

advapi32

RegQueryValueA

shell32

SHBrowseForFolderA

comctl32

InitCommonControlsEx

shlwapi

PathRemoveFileSpecW

uxtheme

GetThemeColor

ole32

CoRegisterClassObject

oleaut32

LoadTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipCreateBitmapFromHBITMAP

oleacc

LresultFromObject

imm32

ImmGetContext

Sections

.text
Size: 7.9MB - Virtual size: 10.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE