326411471496d5aeba00637a7309366b5a7d58950a38affea870b014f91a4e2c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

326411471496d5aeba00637a7309366b5a7d58950a38affea870b014f91a4e2c
Size

1.6MB
MD5

9368494f80deb0f5241b32f00ca6a7db
SHA1

2cab55c88cb5b17aa52bb07e7c45e492331d6d04
SHA256

326411471496d5aeba00637a7309366b5a7d58950a38affea870b014f91a4e2c
SHA512

339437f1efcd6556deb4262025037b38b7d7808120ee4f770d2bb7d5f1f8521616e3a1c19fc9bbe9373cb14861f92580ee1a7ffafec3c30ba1d7ce36632c0cb6
SSDEEP

24576:SN8ctmH965N4MObqgEQIkH9as1afbYpl/7heaiyZgtxiYsx9euc3q3l+UN:SN8ctm05u5fvdifbYj0a1mAIuc2l+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
326411471496d5aeba00637a7309366b5a7d58950a38affea870b014f91a4e2c

Files

326411471496d5aeba00637a7309366b5a7d58950a38affea870b014f91a4e2c
.exe windows:6 windows x86

d5785b08bc7e1e7b2d5286cbc973aebe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

sndPlaySoundW

oleacc

LresultFromObject

shlwapi

PathIsRelativeW

winspool.drv

DocumentPropertiesW

comdlg32

FindTextW

comctl32

FlatSB_SetScrollInfo

shell32

DragFinish

user32

CopyImage

version

GetFileVersionInfoSizeW

oleaut32

GetErrorInfo

advapi32

RegSetValueExW

msvcrt

memcpy

ole32

RevokeDragDrop

gdi32

Pie

Sections

.text
Size: 1.5MB - Virtual size: 6.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE