fd0ad509d5c42865b8d0a9e54e6c5507 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fd0ad509d5c42865b8d0a9e54e6c5507
Size

62KB
MD5

fd0ad509d5c42865b8d0a9e54e6c5507
SHA1

3630f0792886674750471eb7784f805c0495d7b7
SHA256

e35c12be20686b56ca157441907d272c279702c2d796ae84bdd385d3e83ffa78
SHA512

9cb569effe7686c17d73e1ce1c76be5313cb62b7c1d8e5860f25c8b891d77a5f3701aa00483951274968c47bc4f39edc41f9c7a018340aa8f8a27bc97430c648
SSDEEP

1536:L4npVLGnQBfvKSthNJGrV7B4zkyer803xvKGjuqhHdq+3Cn:L4WnQ3hNJKwkye9lKaF3Cn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fd0ad509d5c42865b8d0a9e54e6c5507

Files

fd0ad509d5c42865b8d0a9e54e6c5507
.exe windows:4 windows x86 arch:x86

d3dfe3fac65f62a549d254125f9a08e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStartupInfoA
GetVersionExA
lstrlenA
GetModuleHandleA
GetLocalTime

user32

SetWindowPos
SetWindowLongA

gdi32

GetBitmapBits

winspool.drv

OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyA

msvcrt

__setusermatherr
_controlfp
_exit
_except_handler3
exit
_acmdln
__getmainargs
_initterm
_XcptFilter
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 878B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE