85866658f08d80adadf394f0d483980a53211560fa5182c299a76e3e88e957f4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

85866658f08d80adadf394f0d483980a53211560fa5182c299a76e3e88e957f4
Size

13.0MB
MD5

be75e21a6f6b308bc5ff96c1eccc76bc
SHA1

cfce3fdca5589e2c186fb39df358a1de11622b12
SHA256

85866658f08d80adadf394f0d483980a53211560fa5182c299a76e3e88e957f4
SHA512

87b2a4d70a4ab0c63ae479fbe6aae7faeff3ca84bd4cb83546ba702b17e96593cbaf3d93c3142e43847ca956349d65b91e2fa3bba25d5e2ed9dbb7500f514297
SSDEEP

196608:nxCbsDWuQpd48zabB6mtDFcIaWBa7PNiP4DtIJpdkxhYiUCu7hKpLBr0pbAzLHaG:xCbsDWXFaBPflBS+a8GLBr0pbW6bi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
85866658f08d80adadf394f0d483980a53211560fa5182c299a76e3e88e957f4

Files

85866658f08d80adadf394f0d483980a53211560fa5182c299a76e3e88e957f4
.exe windows:4 windows x86 arch:x86

cffb51ea53b69c4257b762efdd2281b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

user32

GetClassInfoA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

comdlg32

ChooseColorA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayDestroy

comctl32

ord17

Sections

.text
Size: 12.9MB - Virtual size: 15.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE