448dfc086517c8abd5a232d4a0719383 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

448dfc086517c8abd5a232d4a0719383
Size

848KB
MD5

448dfc086517c8abd5a232d4a0719383
SHA1

d907df1aff58d7ea3986b491f708f86a980bed8d
SHA256

b511c4447bf80be596ec45c29edc81857b9e7c5d0fe71f5709e62619b29ec099
SHA512

6966689dbb972b261483f9224773874763002714680d5a7a6b1ed8d89be02b8fc13fd6810912d06cdd86677ccc142fd82bb07421afaa36e496ecbe65a8166ce0
SSDEEP

12288:zaApRVuMAnCIxeNaK/kUzTFFmRyDObFx4ul9qHyAnpF6:NES+ZynXTm3bFx4mOy+pF6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
448dfc086517c8abd5a232d4a0719383

Files

448dfc086517c8abd5a232d4a0719383
.exe windows:4 windows x86 arch:x86

6b5eec7d3c1b6d6eafab28a67986b124

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

rasapi32

RasHangUpA

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

user32

GetDlgItem

gdi32

GetTextMetricsA

winspool.drv

OpenPrinterA

advapi32

RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

wininet

InternetCanonicalizeUrlA

comdlg32

GetSaveFileNameA

Sections

.text
Size: 332KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 514KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE