4b0cb226a46fb923ad2b377877ca48666c0ed8eed833fd80bbb60641b22c89da | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4b0cb226a46fb923ad2b377877ca48666c0ed8eed833fd80bbb60641b22c89da
Size

1.9MB
MD5

1c09f86f22892b1c46be0fa0a7571b3c
SHA1

3a1b59d5efdd0a8549efadcf40006a00609cd108
SHA256

4b0cb226a46fb923ad2b377877ca48666c0ed8eed833fd80bbb60641b22c89da
SHA512

79b10b9cd75c76fde29c7e985432c0910acdd1553e5ab23d71986387dbe822051934639bf95b445dd24cc5bc50d1a5a44896f718ddc3b9e23fb0d2c8388b413a
SSDEEP

49152:f81zEOlv6a0gFAXKfpJPXGUaEwaRbP8qS24qP5P:UuAV0gyXKfTfaMSqS24qP5P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4b0cb226a46fb923ad2b377877ca48666c0ed8eed833fd80bbb60641b22c89da

Files

4b0cb226a46fb923ad2b377877ca48666c0ed8eed833fd80bbb60641b22c89da
.exe windows:4 windows x86

58c00d959411ad7b3730fac0d23c7cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

PeekMessageA

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 672KB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ