c4d6bdd38b1cc9330e98238ff904812339039159eb12b3f847e766f72d9a8a5d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c4d6bdd38b1cc9330e98238ff904812339039159eb12b3f847e766f72d9a8a5d
Size

9.1MB
MD5

ade6fa15322f84f81e6f3cfefb01c6b1
SHA1

0e7097e31912490cd09ad8c56826f3581b8d9947
SHA256

c4d6bdd38b1cc9330e98238ff904812339039159eb12b3f847e766f72d9a8a5d
SHA512

aadd4d181f5e90139ee63d25c67254bdcff338d64dd95c6a02b98d3ddcbe6843f30b0bcb03c805c0d86e03719045d46ade9cb294446188425f55f93405946a34
SSDEEP

196608:D3EFUQzFAehyyeaMN8o+OrsIKlLoppTuJWfTmT3ZcJrbCsvv:D0FUQhAPaI1s7lL8EvZcJrusX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4d6bdd38b1cc9330e98238ff904812339039159eb12b3f847e766f72d9a8a5d

Files

c4d6bdd38b1cc9330e98238ff904812339039159eb12b3f847e766f72d9a8a5d
.exe windows:5 windows x86 arch:x86

d39001d2813b450e2ffb72ddcd966c2e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

CharUpperA

gdi32

CreateCompatibleBitmap

msimg32

TransparentBlt

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

DragQueryFileA

comctl32

InitCommonControlsEx

shlwapi

PathFindFileNameA

uxtheme

GetWindowTheme

ole32

OleGetClipboard

oleaut32

LoadRegTypeLi

oledlg

ord8

winmm

PlaySoundA

gdiplus

GdipSetInterpolationMode

oleacc

AccessibleObjectFromWindow

imm32

ImmGetContext

Sections

.text
Size: 9.0MB - Virtual size: 14.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE