413715710f327697d1744ba5fe669e10 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

413715710f327697d1744ba5fe669e10
Size

131KB
MD5

413715710f327697d1744ba5fe669e10
SHA1

9ceaf79f255592767a49778232ea29b15648cd7d
SHA256

e5f59cfdfb8e3b74debe90edaa924e353b0e325825fadd54bfa8e682660de12c
SHA512

b15b80c832c290354dc8fe71286b6147d7509c14191ed07d1012726af0f636dcf6cb9daae1e57cc497b7ef4fddddbd6cf591105aff2e76a99b72bf5bb987945f
SSDEEP

3072:pxPkg9AwPzuXLaOaGBWZPkdfPbtBxx7NmutV/5BIW:Z938ePGBW6fP13L3I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
413715710f327697d1744ba5fe669e10

Files

413715710f327697d1744ba5fe669e10
.exe windows:4 windows x86 arch:x86

ce6c03879f42d78266f368e652f4ecaa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

TerminateThread
GetLocaleInfoA
CreateIoCompletionPort
LCMapStringA
GetStringTypeA
GetStringTypeW
EnumResourceNamesW
HeapSize
RaiseException
ExitProcess
GetConsoleMode
GetConsoleCP

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ