0b9fd97fee5dfdf015e057ed912e486e980604e6c254e7fa545b43eaab5c1dba | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b9fd97fee5dfdf015e057ed912e486e980604e6c254e7fa545b43eaab5c1dba
Size

3.8MB
MD5

f5e12362df20dc72070ab9c7ca2e5117
SHA1

1414e3b8c662fffb591371df15e70b108db38943
SHA256

0b9fd97fee5dfdf015e057ed912e486e980604e6c254e7fa545b43eaab5c1dba
SHA512

db67b5bd0660412b7735533b925004d6b599b642b927922b4f75921b46943df19131e46e0881e0b874fdb0bdaf781d82ec5b34c1855b0e8d7f9570c8607db933
SSDEEP

98304:rNkA2Gi7US2EfMkNJitYndwazGnBuk1fyGyNiJ+J9iv:p0GJxCMWJitkSNukRc2+JEv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b9fd97fee5dfdf015e057ed912e486e980604e6c254e7fa545b43eaab5c1dba

Files

0b9fd97fee5dfdf015e057ed912e486e980604e6c254e7fa545b43eaab5c1dba
.exe windows:4 windows x86 arch:x86

6e602d2879f1359b4f218fefb19e4593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapDialogRect

gdi32

SetViewportExtEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.6MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE