759fc13bdbd48b42d05827905d382e81 | Triage

Sharing

General

Target

759fc13bdbd48b42d05827905d382e81
Size

297KB
MD5

759fc13bdbd48b42d05827905d382e81
SHA1

13bddff0959ba7ebfb7829894d8f5764a207965b
SHA256

e6a746e039603adc1810935e323104d4812a79585b04ce15ad7395a0280f860e
SHA512

f965cc43242364829d117bf7d36a14ef5e1c0080c1845a91861b4b6ccca882d8ec336a43e15b2bba973fe16084461c18de784de70691647cc0ef537c6da7c5da
SSDEEP

6144:5cgWAukm+Y4Pg37xU3wCykvvaWHc8BYdJqv03RWJVdnkRR4g94:L7mT4Pg3t3CRv48edNIJjM/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759fc13bdbd48b42d05827905d382e81

Files

759fc13bdbd48b42d05827905d382e81
.exe windows:4 windows x86 arch:x86

3e932cc715b5d50ff5bba3299698ba87

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
DeleteFileA
GetTempPathA
GetVersionExA
GetStartupInfoA
lstrlenA
GetSystemDirectoryA
GetModuleFileNameA

user32

GetSystemMetrics

gdi32

GetBitmapBits

winspool.drv

OpenPrinterA

shell32

SHGetDesktopFolder

msvcrt

__setusermatherr
_controlfp
_except_handler3
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 290KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE