146acd905485e2a8d361af30de1a66ad633dbba0040db3c56be25fe07e4cc0b6 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

146acd905485e2a8d361af30de1a66ad633dbba0040db3c56be25fe07e4cc0b6
Size

1.7MB
MD5

e8c82f4a1dea08fd0412fa9a7aa747c3
SHA1

98ce9b53e9e6973d5b422a2717b636265ebb3ede
SHA256

146acd905485e2a8d361af30de1a66ad633dbba0040db3c56be25fe07e4cc0b6
SHA512

050e84ef3876de5743ff11da35cd0bf4cd8995e813a2b46d3f5d0a36363e5a120ba82f72968258fdfa87f2040fbeebbee1e47460e0cb9e341753e6cca5a43c46
SSDEEP

49152:tJUxHYd0onOXSJjUnIUwJCYfZMcmsxjIT1i/O1VVUsp4y:yHaeiJwnwUYfZMJsxkTg2DVUsp4y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
146acd905485e2a8d361af30de1a66ad633dbba0040db3c56be25fe07e4cc0b6

Files

146acd905485e2a8d361af30de1a66ad633dbba0040db3c56be25fe07e4cc0b6
.exe windows:4 windows x86

58c00d959411ad7b3730fac0d23c7cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

PeekMessageA

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 528KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ