976e94e1836d4fab5231f241e6d0e67e240ec3fd82fa518cfd407a086c602267 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

976e94e1836d4fab5231f241e6d0e67e240ec3fd82fa518cfd407a086c602267
Size

4.0MB
MD5

0861230c730be274ade3ba0b8e1a88c3
SHA1

8b6111856009a5ef380070951eee48bd314d684f
SHA256

976e94e1836d4fab5231f241e6d0e67e240ec3fd82fa518cfd407a086c602267
SHA512

8a47d31cedaa64def8cad6359c1e6bbe61860a8dbb2d860ef6b454532ffded5eef4e39bd39a22ce1e2a2cb29a02a5995f9cb428ec9178f9b52f025319a408d6b
SSDEEP

98304:3bFjCPCgE8yHnuBbn5tMGB2NnqhFVupxyj:LFr18yOftHUnqh0xyj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
976e94e1836d4fab5231f241e6d0e67e240ec3fd82fa518cfd407a086c602267

Files

976e94e1836d4fab5231f241e6d0e67e240ec3fd82fa518cfd407a086c602267
.exe windows:4 windows x86

360833289604f3578b09d754e1a46b20

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

GetTimeZoneInformation

user32

GetClassInfoA

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

DragFinish

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ImageList_Add

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 2.5MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ