675cc019b0032c373be99b7daa4d0f4c4265326c9f0638306b210b04ff1d3850 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

675cc019b0032c373be99b7daa4d0f4c4265326c9f0638306b210b04ff1d3850
Size

14.5MB
MD5

5e925b92a9f06227deb5896c5268b698
SHA1

f4248b72b11f6e3061b9e7fe4ed2679de569ac49
SHA256

675cc019b0032c373be99b7daa4d0f4c4265326c9f0638306b210b04ff1d3850
SHA512

b02b5984703cd01e46c10a4129197467b897b0496b2109ead7cf4c530c7957524287ce9ac79e51fc3002670a6844eb662ca861bfcd94efdeb0b779fc2c23ca09
SSDEEP

393216:V2k/z7wwCFuUbFoq5CP4QvLWcwblpYL5DjOdD9C9F:Yk8fbqBP4QabIL5Didcn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
675cc019b0032c373be99b7daa4d0f4c4265326c9f0638306b210b04ff1d3850

Files

675cc019b0032c373be99b7daa4d0f4c4265326c9f0638306b210b04ff1d3850
.exe windows:4 windows x86 arch:x86

6e602d2879f1359b4f218fefb19e4593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapDialogRect

gdi32

SetViewportExtEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.2MB - Virtual size: 26.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE