34d9efc1d14a447bf9343a0980856786 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

34d9efc1d14a447bf9343a0980856786
Size

365KB
MD5

34d9efc1d14a447bf9343a0980856786
SHA1

ae6a51fa4c0b0a9b33b42767003ba252e020d690
SHA256

36a99b89ed56ecf8807aad671be51e239efc81d0b6da757e4f0b08bbcb8521ac
SHA512

b19088591f9b7b3f4c923c0dea19e9cc0b6712f1b900c89404a45ce61182b0dd4e550207cd3c222d6bfc889875c6512ef0aac6de50011a742102b61c174a9088
SSDEEP

6144:9THKC8uZDh/OuMIOt2wzn5UlE2WFRtxExN6b+5qYJk1X34cbIZrHBqZ:ZR8YNWuMF5z56EJRtUobvYq/IZrHAZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
34d9efc1d14a447bf9343a0980856786

Files

34d9efc1d14a447bf9343a0980856786
.exe windows:4 windows x86 arch:x86

06b9fd78ea998dd0195fd521004146e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

user32

GetActiveWindow

gdi32

GetMapMode

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

VariantChangeType

comctl32

ord17

oledlg

ord8

comdlg32

ChooseColorA

Sections

.text
Size: 339KB - Virtual size: 952KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE