1bcb77c96a3010046557a4788e6a78a47bdbefb602b425ae046356ecf8dd7f70 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1bcb77c96a3010046557a4788e6a78a47bdbefb602b425ae046356ecf8dd7f70
Size

2.1MB
MD5

9ca739df6494c1c35f3d8d5b43b6c948
SHA1

c3f6e6156fdb38c42637cfa0c3b9c11930b68461
SHA256

1bcb77c96a3010046557a4788e6a78a47bdbefb602b425ae046356ecf8dd7f70
SHA512

0695966eb97e20b7b9693adf17956d9d2886ff4a9bc05ecc94892067b87dbe202bad5ff1b3a11451b4113ba776e9866ce1fe776f089b5d85fe80e6d49c475d87
SSDEEP

49152:okGeq+yM69GNpiPFiTolQXflqqMMQNnRoIK:l3qVMnv2iTo6aMG6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1bcb77c96a3010046557a4788e6a78a47bdbefb602b425ae046356ecf8dd7f70

Files

1bcb77c96a3010046557a4788e6a78a47bdbefb602b425ae046356ecf8dd7f70
.exe windows:4 windows x86

b1cf2015dee3de4ac58f1f46e0779fcf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

UnhandledExceptionFilter

user32

IsZoomed

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_GetIcon

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 560KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ