86e857414774af3607b3d48002d08ade2f663cb36f91be8d20cd84b6fa6028e9 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

86e857414774af3607b3d48002d08ade2f663cb36f91be8d20cd84b6fa6028e9
Size

9.2MB
MD5

e97f91abae16663ec90f3b434a855d11
SHA1

790a127ca0dfe64d208abdbb60e1685f0442a1f1
SHA256

86e857414774af3607b3d48002d08ade2f663cb36f91be8d20cd84b6fa6028e9
SHA512

f5ec68b2fbcc4dcedd28162ed3cdecd45b63079fa9effe7a03aadd19a336d01351a075bf9daa785b6a806d2fd8ab3f690124f12e17630815c0421ea30263dbd9
SSDEEP

196608:b3EFUQzMjtlddpG6OpdJZ4t+sLoFCkZghk+ewCnnmugulNEGAnrVoGO/AA/SF:b0FUQAO3ct+sLooYP7nnCu3EdrFO/KF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86e857414774af3607b3d48002d08ade2f663cb36f91be8d20cd84b6fa6028e9

Files

86e857414774af3607b3d48002d08ade2f663cb36f91be8d20cd84b6fa6028e9
.exe windows:5 windows x86 arch:x86

d39001d2813b450e2ffb72ddcd966c2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharUpperA

gdi32

CreateCompatibleBitmap

msimg32

TransparentBlt

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA

uxtheme

GetWindowTheme

ole32

OleGetClipboard

oleaut32

LoadRegTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipSetInterpolationMode

oleacc

AccessibleObjectFromWindow

imm32

ImmGetContext

Sections

.text
Size: 9.1MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE