e76bfa15b1692b73ed6e72c875e4fcd029903be333d3d24f01f8eaaf2135f208 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e76bfa15b1692b73ed6e72c875e4fcd029903be333d3d24f01f8eaaf2135f208
Size

3.4MB
MD5

0384b13d06ef2bb588fe6b14450a36da
SHA1

d9a08972374d8357319f071d6d0def0ab48997b6
SHA256

e76bfa15b1692b73ed6e72c875e4fcd029903be333d3d24f01f8eaaf2135f208
SHA512

806c14ffa1ec1d3b35c2460f6cf348327098c4de99c2f198ffa7159484dd5fb3da91ab9ef3d7660c1c17db04c718a95204bf13c67bca91bd50324f14346c4b9a
SSDEEP

98304:FTpT7m8qi+3OXBK3eMo19Q8AgTZJsqg839:FTVI+xKO1QTK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e76bfa15b1692b73ed6e72c875e4fcd029903be333d3d24f01f8eaaf2135f208

Files

e76bfa15b1692b73ed6e72c875e4fcd029903be333d3d24f01f8eaaf2135f208
.exe windows:4 windows x86

feca7021b2a4c5ad6db3ba1ce8dd4ad1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

UnhandledExceptionFilter

user32

IsZoomed

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

DragFinish

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_GetIcon

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.0MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ