cf42aa5507ff6e8da3070e5784c93c624391680ade89d01bb49cfec4132365f8 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

cf42aa5507ff6e8da3070e5784c93c624391680ade89d01bb49cfec4132365f8
Size

7.9MB
MD5

95bb94d4f4122d95b8c466c4bbd23feb
SHA1

fb28754f34f0287ed2731422629fc32316cf568f
SHA256

cf42aa5507ff6e8da3070e5784c93c624391680ade89d01bb49cfec4132365f8
SHA512

25e2f813de3cca9833fd5f399ce1df0d0f9a8b56ec8750835eaea102e2ae3ab46b968bc4149b64fe6759283f43207d4863c179d750f32380f9aba0a1d7dea854
SSDEEP

196608:ozyM2gtEexJPQT3KCmgGW3jRdGtzBVEbf1Vp6hzIl:yRPeAQT6h3W3jRdi7EbZCzY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf42aa5507ff6e8da3070e5784c93c624391680ade89d01bb49cfec4132365f8

Files

cf42aa5507ff6e8da3070e5784c93c624391680ade89d01bb49cfec4132365f8
.exe windows:5 windows x86

239b2b2624f9dff16b5a0066003dc54b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

RedrawWindow

gdi32

GetClipRgn

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

GetJobA

advapi32

RegEnumKeyExA

shell32

SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

ole32

OleFlushClipboard

oleaut32

OleCreateFontIndirect

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipGetImageGraphicsContext

oleacc

AccessibleObjectFromWindow

imm32

ImmReleaseContext

Sections

.text
Size: 7.9MB - Virtual size: 9.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE