0c47d7a89086a372cf8c230c69004f121adc637e3aac38ad0d43edb1a84309b2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0c47d7a89086a372cf8c230c69004f121adc637e3aac38ad0d43edb1a84309b2
Size

1.7MB
MD5

4b47816ec4d43e1ffc4c1ed688147331
SHA1

9edd82d84e8b6a4df284d239e007eeaa9cc509a5
SHA256

0c47d7a89086a372cf8c230c69004f121adc637e3aac38ad0d43edb1a84309b2
SHA512

d8f55e19662faff6c0610753701fa03c4baaa34f20c3cb7d57282dff0ff31b6e0772f213b135d27f31fe626e0c22f3be3f5530a882fd4b36e7f35e7f0fb6e9ec
SSDEEP

49152:yIGmagd1OAkUYvnWBWfPrOpYBNtPEKeKe4s00aa:3GmaWOA4vniYXtPEX4sX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0c47d7a89086a372cf8c230c69004f121adc637e3aac38ad0d43edb1a84309b2

Files

0c47d7a89086a372cf8c230c69004f121adc637e3aac38ad0d43edb1a84309b2
.exe windows:4 windows x86 arch:x86

58c00d959411ad7b3730fac0d23c7cf2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

PeekMessageA

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 528KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ