2339868bdd0b2be75b1aacd051350a1f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2339868bdd0b2be75b1aacd051350a1f
Size

956KB
MD5

2339868bdd0b2be75b1aacd051350a1f
SHA1

5078550d17f794e5b141c6cd85b486caf419884d
SHA256

18e3cf87a9acba1ae416d5cc9972f822e47d569bc658ad61bdc61880fbbb51e4
SHA512

0f7c757eab21278de3897841327c176c837a93af5d039e64194e439b01bb5f0924b2123407e15816d232e4d80fd7f9e640a511556b66e98461a07b6c7920a476
SSDEEP

12288:Z5ESnklKuL7CZxNEoe46HRqsqIo//xuvsR0FdQpeVpk6jGWxccpjrs4EcCWDtT4S:XR0ONwHrapwswEzOGCcos4VCW9Dy+gu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2339868bdd0b2be75b1aacd051350a1f

Files

2339868bdd0b2be75b1aacd051350a1f
.exe windows:4 windows x86 arch:x86

4fc03100b21c663cabf7f75e83bb65b5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

cg32

__cg_handles

advapi32

RegCloseKey

version

GetFileVersionInfoA

wsock32

WSAAsyncGetHostByName

winspool.drv

ClosePrinter

comctl32

ImageList_Add

comdlg32

GetOpenFileNameA

gdi32

BitBlt

shell32

SHBrowseForFolderA

user32

ActivateKeyboardLayout

imm32

ImmGetCompositionStringW

ole32

CLSIDFromProgID

oleaut32

GetErrorInfo

olepro32

OleLoadPicture

Sections

.text
Size: 931KB - Virtual size: 16.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE