51fd9a78476d31276a32be9dea5097f0660ab4affb260952ac01c9bb3f91ea34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51fd9a78476d31276a32be9dea5097f0660ab4affb260952ac01c9bb3f91ea34
Size

1.2MB
MD5

27e3e966e052c551a1fa2a48e52d13e9
SHA1

0d6a14318ede3dca3db64c3da7909761e32d374d
SHA256

51fd9a78476d31276a32be9dea5097f0660ab4affb260952ac01c9bb3f91ea34
SHA512

75fc0cde28c089a65b3857a09468785044df7caecc41fe56c3be7c4d727b0336f3cb512752f390409b077b7e4a7746d265fbd03a62d9b21b8d34c5805dff57fe
SSDEEP

24576:JwRD64oO4CCeH6dDBZA6MPg+8Arlw+wtLhnXOcszAV0Z5BOubJA:qDPoO47C61oPutLhnXYAC3tb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51fd9a78476d31276a32be9dea5097f0660ab4affb260952ac01c9bb3f91ea34

Files

51fd9a78476d31276a32be9dea5097f0660ab4affb260952ac01c9bb3f91ea34
.exe windows:4 windows x86

af6bbc357646cd2f6855afed90b020c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSACleanup

user32

GetMessagePos

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: 1.2MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE