213fe3505c9b33173ea1c623bed5618a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

213fe3505c9b33173ea1c623bed5618a
Size

572KB
MD5

213fe3505c9b33173ea1c623bed5618a
SHA1

f0a3be3efd80843a16e4b1a2750a49b0c1a05129
SHA256

e60362c80644a40ac88c84aaa83f3a16c1f33b3772ae69c644bcc84cf095f267
SHA512

4f36b77b3f875f3ef614ac6a43b55eaabfed3cc01fa69234a07521f9feeaf3a6091fa30a5e38e8770e5ded784e1944e035bedb4a53d473a58816824f049d70d2
SSDEEP

12288:aOHYxDOkkhTqXDP+jkI+ZhPGxLlAvOPdt5WHt2x98jxGKbpap/px:aOCkhKDPQkNZhPGPx5ZP7p

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
213fe3505c9b33173ea1c623bed5618a

Files

213fe3505c9b33173ea1c623bed5618a
.exe windows:4 windows x86 arch:x86

17fc2409d45a1d3ef1f7f801f64dab1d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

CoTaskMemFree

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

Shell_NotifyIconA

urlmon

URLDownloadToFileA

comdlg32

GetSaveFileNameA

wsock32

WSACleanup

ntdll

NtQueryInformationProcess

Sections

CODE
Size: 542KB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE