da0d7434e9e8c107d16529f3934a67d70ffddb8579627af5b9ceff24456469d2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

da0d7434e9e8c107d16529f3934a67d70ffddb8579627af5b9ceff24456469d2
Size

9.1MB
MD5

6184cc878f4d98b7072b69fe4f19fa9c
SHA1

a359fdbed3539d523c1df35576c9313fa3ea1ec4
SHA256

da0d7434e9e8c107d16529f3934a67d70ffddb8579627af5b9ceff24456469d2
SHA512

a61112bbe168f72399dba2be8b1f2d82dd28fabc2291f4cd87558d563118bc3f9c6cdb566bc8033adb93fec690f3c2e8ed176cd0c217fa48aa7ce095c3c5b37c
SSDEEP

196608:53EFUQzCxnPvNDr+mbKT1VpwJtq5khLnpqi+6/wySy:50FUQS9DNbKxiNLpZ+6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
da0d7434e9e8c107d16529f3934a67d70ffddb8579627af5b9ceff24456469d2

Files

da0d7434e9e8c107d16529f3934a67d70ffddb8579627af5b9ceff24456469d2
.exe windows:5 windows x86 arch:x86

d39001d2813b450e2ffb72ddcd966c2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharUpperA

gdi32

CreateCompatibleBitmap

msimg32

TransparentBlt

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA

uxtheme

GetWindowTheme

ole32

OleGetClipboard

oleaut32

LoadRegTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipSetInterpolationMode

oleacc

AccessibleObjectFromWindow

imm32

ImmGetContext

Sections

.text
Size: 9.0MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE