39a77c9f92f067c3b710e8c879678acf | Triage

Sharing

Copy URL Twitter E-mail

General

Target

39a77c9f92f067c3b710e8c879678acf
Size

444KB
MD5

39a77c9f92f067c3b710e8c879678acf
SHA1

8107e7a81661353a41bef6a2decb58a7318187b0
SHA256

74850ae9e0c9f6ab14336ed63648057f98f10d28d9f84a39e3552ad0c4d165bb
SHA512

bd8e48f51b29244aa9f2553956fa800505da7089079ac63802ccea5f57bcdf2968ba960e6121a2ed3aed1ca906e6f3bb56beb64b7ee22f51760eb39fb35d4bad
SSDEEP

12288:W33Xn66ga6ENOy+CDyepaccTCSjfkkItQU8eoPk:8Hn6/8NOy+CDQcciQpeoPk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39a77c9f92f067c3b710e8c879678acf

Files

39a77c9f92f067c3b710e8c879678acf
.exe windows:5 windows x86 arch:x86

aac73941c87ad61412ca8ad4d2283df3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

DestroyMenu

advapi32

RegQueryValueExW

shell32

ShellExecuteW

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 433KB - Virtual size: 480KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE