39df4d4909f9913b06a47937ff07eaab | Triage

Sharing

General

Target

39df4d4909f9913b06a47937ff07eaab
Size

608KB
MD5

39df4d4909f9913b06a47937ff07eaab
SHA1

957c53c58b7cb14fd07d9c6b064d31bd32c8def4
SHA256

6b386087c50c3452e83f1f0e92acda6813010fd4bf24458c261ba1a492d49ef3
SHA512

25a94bf57168c8c809dbfd9274e5e00fe6ed22207171e2be7888f58876ed624dd6ccab1b35693203800f34eaae141f0472c3faf1cfcf9e35f3bfd0dd153770eb
SSDEEP

12288:C0aIDG6w4fui0Ttau8rkLUfHHy/b7o1gHTZ+v4/5VHf:CVfWf09LUPHqb71z+gV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39df4d4909f9913b06a47937ff07eaab

Files

39df4d4909f9913b06a47937ff07eaab
.exe windows:4 windows x86 arch:x86

72ee0489bc5f77225eb835bc6f612eae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

PrintDlgA

winmm

timeGetTime

Sections

.PECO
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 109B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ