403fceb4d08704e49071b34488b8946e2c0f58b941646685c5cf825d553f578e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

403fceb4d08704e49071b34488b8946e2c0f58b941646685c5cf825d553f578e
Size

9.6MB
MD5

1a925c812af37b1e7f385034c4c5a71d
SHA1

8a3b0d7380b781496dc8a475c980c4ac355a56fa
SHA256

403fceb4d08704e49071b34488b8946e2c0f58b941646685c5cf825d553f578e
SHA512

b46379fa6494dad7a22c1a970a1ea8ecb8f1bd980a6a04f438a59445830fb39e7615a64491f7b4e783f2a7c5f254b856513b20efb623cc1ad628f6f619cc8b7b
SSDEEP

196608:otm95/QEsp4OYxaK+GR6f30d9umhFyJ7wIzZXFEntZCd:P5Yb1ZK+E6fE7uv7TZVQtZCd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
403fceb4d08704e49071b34488b8946e2c0f58b941646685c5cf825d553f578e

Files

403fceb4d08704e49071b34488b8946e2c0f58b941646685c5cf825d553f578e
.exe windows:5 windows x86

1ca055d7b976994da40641378f877253

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetDlgItemInt

gdi32

CreateCompatibleDC

msimg32

TransparentBlt

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHAddToRecentDocs

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

uxtheme

GetThemeSysColor

ole32

OleInitialize

oleaut32

SysStringLen

oledlg

ord9

oleacc

AccessibleObjectFromWindow

gdiplus

GdipDrawImageRectI

imm32

ImmReleaseContext

winmm

PlaySoundA

Sections

.text
Size: 9.5MB - Virtual size: 15.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE