51355439b30e03eefeda92eeab4828ca75e29ad6aaafdfaee244f8c97b034c6b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

51355439b30e03eefeda92eeab4828ca75e29ad6aaafdfaee244f8c97b034c6b
Size

12.7MB
MD5

f60a19790bf6aa40ad9214be3e99a87b
SHA1

88c9df52b7df39162e462659f4f7aec6ebc38122
SHA256

51355439b30e03eefeda92eeab4828ca75e29ad6aaafdfaee244f8c97b034c6b
SHA512

83aaae5e3fdbf74ed1f6e3166cd601c5007dfe5dd1aed1ddb469acca22af45fc31923201e959912d6b665f1a3b2be234c05f25a0d86da42d66459774adfa5dc2
SSDEEP

393216:fFudH6IxygHc0LYSDi4C6j6fLmUO11TO+rjSJlnBuKf:foPkgHc2YXmiLmUAjSZL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
51355439b30e03eefeda92eeab4828ca75e29ad6aaafdfaee244f8c97b034c6b

Files

51355439b30e03eefeda92eeab4828ca75e29ad6aaafdfaee244f8c97b034c6b
.exe windows:5 windows x86 arch:x86

f90b3b8b491c48ca1f8e4661251dc515

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

gdi32

SetViewportOrgEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantTimeToSystemTime

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.6MB - Virtual size: 24.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE