6e2fbd23ae50f9bc02488eccf286a02c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6e2fbd23ae50f9bc02488eccf286a02c
Size

282KB
MD5

6e2fbd23ae50f9bc02488eccf286a02c
SHA1

37be358825ff31cb46e4d14f48e36787bd4e8c88
SHA256

e818793be4ab7b42fc9bc3e55c7974888bdc49d5e7112a64fbdd0e10f0af592f
SHA512

7f69981b20c440f5fa56aefcf02f22795c9f9a87c7df93c40b9849663341e7a2cc13912df4c0ca76884d6ca563cd220a6293f119eba7e08d248620a527b02ba1
SSDEEP

6144:fxOcplnxvEaw010o8rhzZdvxx6JcYH4arNwEz21T7vkkJ+Abt:tnpEaw01KrpZEpi1T7vjM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6e2fbd23ae50f9bc02488eccf286a02c

Files

6e2fbd23ae50f9bc02488eccf286a02c
.exe windows:4 windows x86 arch:x86

6e6c11445ccb1aab9e584a25ee43606f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

kernel32

GlobalAddAtomA
FindClose
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
ExitProcess
LoadLibraryExW
EnumResourceNamesW
InterlockedExchange
GetTickCount
QueryPerformanceCounter
RtlUnwind
GetLongPathNameA
FreeLibrary
GetStartupInfoA
GetProcAddress

comdlg32

ChooseFontA
GetOpenFileNameA

ole32

CoTaskMemFree
CoCreateInstance
CLSIDFromString
StgCreateDocfile

Sections

.text
Size: 152KB - Virtual size: 280KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ