269b5c93110402efe0b45468a528d3733e74c58147605a246c0ca6288ff5c6c5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

269b5c93110402efe0b45468a528d3733e74c58147605a246c0ca6288ff5c6c5
Size

15.1MB
MD5

fb2f0650007396d3370deb61ec806e5e
SHA1

b7e3e8a345be8e3eda95451e2e46352f13042b99
SHA256

269b5c93110402efe0b45468a528d3733e74c58147605a246c0ca6288ff5c6c5
SHA512

f809c26ffa8c16e7f3b6b735e2a88f2569100156fefaf7206cbdeb8914d03580401678e50d7c5ee865b93bf774676de0a74cb0d5bac4b4644647361115b13c12
SSDEEP

393216:V2k/z7wwCFu22cvO5+62S82vAjWe5NEyvnlmBrxvK:Yk8scW5+6HiH5NXYBrxS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
269b5c93110402efe0b45468a528d3733e74c58147605a246c0ca6288ff5c6c5

Files

269b5c93110402efe0b45468a528d3733e74c58147605a246c0ca6288ff5c6c5
.exe windows:4 windows x86 arch:x86

6e602d2879f1359b4f218fefb19e4593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapDialogRect

gdi32

SetViewportExtEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 5.2MB - Virtual size: 26.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE