4e42ddb2de0ffd8c1af69f57e43b71dfe6167d234ce0443f4981e516e27ea7a4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4e42ddb2de0ffd8c1af69f57e43b71dfe6167d234ce0443f4981e516e27ea7a4
Size

3.8MB
MD5

e591be3e98f23fe0d3ef04e9dbbc8776
SHA1

218362e3c1f26db99bc64eb89d469a0e16c4690d
SHA256

4e42ddb2de0ffd8c1af69f57e43b71dfe6167d234ce0443f4981e516e27ea7a4
SHA512

43c119186962166599450d29b8a90f9533adcfcba7157b6d977bd307fc76213c58fd745268de6d9693f0e8fbd81f13fd201ae8e1b7d5df9f93d7e7a192f6d1e1
SSDEEP

98304:yI8I2L10wuAV0gyXKfTfaMSqSrne4gk4c3oev5J4qP5O:y7idAV0gy6fTyxqYez7I5ak5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4e42ddb2de0ffd8c1af69f57e43b71dfe6167d234ce0443f4981e516e27ea7a4

Files

4e42ddb2de0ffd8c1af69f57e43b71dfe6167d234ce0443f4981e516e27ea7a4
.exe windows:4 windows x86

b7277ecabf5a5995eddef00f623bd6f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetTimeZoneInformation

user32

IsZoomed

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

DragQueryFileA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_Add

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.2MB - Virtual size: 3.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 208KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ