0b158991f6081ec73fe6d86d0804067e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0b158991f6081ec73fe6d86d0804067e
Size

124KB
MD5

0b158991f6081ec73fe6d86d0804067e
SHA1

bd67fb44db15215ffa8a5530cfd7b9d6faed7b31
SHA256

d3acfbf9421050aacf510590be805447621317e187e8d54f8105df903a76956b
SHA512

c07bbf289b20a1f68d05371bd3fef59aea76317bcb6bd4a572e7440979790457a46ed279e2998a649b058d1d3927127a56d1b34c0bcbebd63ced1aa01d258370
SSDEEP

3072:8wwnrvnECqUFrX2f+3BW9DjN1/w3JqozICicA:5+rPECnFrX2f+3BW9DBokFc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0b158991f6081ec73fe6d86d0804067e

Files

0b158991f6081ec73fe6d86d0804067e
.exe windows:4 windows x86 arch:x86

cdbe1668939cea78242a6e6487e547c3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

kernel32

TerminateThread
GetStringTypeW
CreateIoCompletionPort
GetLocaleInfoA
HeapSize
LCMapStringA
EnumResourceNamesW
GetConsoleMode
RaiseException
ExitProcess
GetStringTypeA
GetConsoleCP

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rscr
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ