71f8ff83e234ae7c77720300796ffbef474ca6a42170273cd66a4ff3fe2be279 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

71f8ff83e234ae7c77720300796ffbef474ca6a42170273cd66a4ff3fe2be279
Size

2.4MB
MD5

8a91c017f803ad99c83b0a2c0968eca8
SHA1

7e663948d8528ad5e5a30d3ac1e0fd8233ad85f2
SHA256

71f8ff83e234ae7c77720300796ffbef474ca6a42170273cd66a4ff3fe2be279
SHA512

78bfcf730eff02580915989f20f75aa661cf09221cd024fddf451627fda90dd2771ca1851502e35fb28bb8718b621a31abb18118efcf5696e8c1e8f6894b9850
SSDEEP

49152:nKEzVnXHnm6SnUx2c7afIoeMQbhaYInoAsDswQ8:n79XHmKgIobea0AsoN8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
71f8ff83e234ae7c77720300796ffbef474ca6a42170273cd66a4ff3fe2be279

Files

71f8ff83e234ae7c77720300796ffbef474ca6a42170273cd66a4ff3fe2be279
.exe windows:4 windows x86 arch:x86

ab472bdb8dda700adcda2438dea10aca

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutRestart

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ord17

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 1.0MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 988KB - Virtual size: 988KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 376KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ