69add1e62befb764ce01426264f418ce | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69add1e62befb764ce01426264f418ce
Size

125KB
MD5

69add1e62befb764ce01426264f418ce
SHA1

0d7181386176d727aeb7dc68feb48705c0d39792
SHA256

e5309645d06304e283e295ac98a8e2f0c421dcb531d6a23c2a40a7aa037e3489
SHA512

fb9e510f437d174126e29ab7909c372965470bc84f70e915c4f60fadb1592ba67d23efcfa7db5c3efd8782397efa52b15238defd99600777dbc9a4a72383e185
SSDEEP

3072:hWrNbR1d//dk22vvvszesw5qZJIYfdO35acsS7:wrf1d/lCvcbGYw5acsS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69add1e62befb764ce01426264f418ce

Files

69add1e62befb764ce01426264f418ce
.exe windows:4 windows x86 arch:x86

2d021d3642ac2b2866009ce1868ed1c5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegQueryValueW

comctl32

InitCommonControlsEx

comdlg32

GetSaveFileNameW

gdi32

DeleteDC

oleaut32

VariantClear

shlwapi

PathAppendW

user32

LoadCursorW

winspool.drv

DocumentPropertiesW

Sections

.text
Size: 91KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE