6645f40597b1ddeb3f3759f3c55a747e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6645f40597b1ddeb3f3759f3c55a747e
Size

3.9MB
MD5

6645f40597b1ddeb3f3759f3c55a747e
SHA1

c4aad7253ee7b61abd1b57385752858ee4c2e0e4
SHA256

e4bd3f5437e366e031371626a41ec8120df92009f34daa07d521c0a0cb420074
SHA512

297f06c606a43cf94ed63f587e7dd39f9f6ea1b8ca14ebb0851c92b1efe8a373c5737b09cbe35ca0413d38547aca7d2e15795d9aa1cfd851b06a99d71899a579
SSDEEP

98304:uNz8OI73R25IyGq8pUEu/2BCGSHCJPdWusg:28OI7BjBdSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6645f40597b1ddeb3f3759f3c55a747e

Files

6645f40597b1ddeb3f3759f3c55a747e
.exe windows:4 windows x86 arch:x86

db04412a59d78a4aadbbb0425469cb9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

sndPlaySoundA

msimg32

AlphaBlend

user32

GetWindowThreadProcessId

gdi32

PolylineTo

comdlg32

CommDlgExtendedError

winspool.drv

ClosePrinter

advapi32

AdjustTokenPrivileges

shell32

SHGetFileInfoA

comctl32

_TrackMouseEvent

oledlg

ord3

ole32

GetClassFile

olepro32

ord253

oleaut32

VariantClear

Sections

.text
Size: 3.9MB - Virtual size: 10.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE