234214b74ca075b2fe825f8f168bdb8c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

234214b74ca075b2fe825f8f168bdb8c
Size

3.0MB
MD5

234214b74ca075b2fe825f8f168bdb8c
SHA1

4c61df3b4e75b424bfe23805cf3c106dcfe86ddf
SHA256

e95d731bcd2f7ea0728ff507b0bac1a70956efeaa8d08595910edd41b38b1029
SHA512

80f19acd2d261adcd5dc85967e44ceeb91c43441a1dcad33a29b6aaf02f2c3dac91a99d632e70d1232603b0bc86b3131e602ec8d0a51b2c1987a3737a3359cea
SSDEEP

98304:0yY0hFD4zjbSREBFr6R9gHJXlxAHPYar6DfeGV2oK:i4D+jb0EB97JVxAD6DfnvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
234214b74ca075b2fe825f8f168bdb8c

Files

234214b74ca075b2fe825f8f168bdb8c
.exe windows:4 windows x86 arch:x86

66359dd3c24e8e2cab764680e2100508

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
GetDC

kernel32

GetModuleHandleA
GetEnvironmentVariableA
ExitProcess
FormatMessageA
GetLastError
SetLastError
GetProcAddress
VirtualProtect
LoadLibraryA
VirtualFree
VirtualAlloc
GlobalAlloc
SetFilePointer
ReadFile
CreateFileA
GetModuleFileNameA
LoadLibraryA

advapi32

FreeSid

comctl32

ImageList_Add

comdlg32

PrintDlgA

gdi32

SaveDC

ole32

OleRun

oleaut32

VarNot

shell32

DragFinish

urlmon

HlinkNavigateString

version

VerQueryValueA

wininet

InternetOpenA

winmm

joyGetPos

winspool.drv

OpenPrinterA

wsock32

recv

Sections

.text
Size: 38KB - Virtual size: 3.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE