5419bc5a6b9f2ef55dd3846b29ed4728 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

5419bc5a6b9f2ef55dd3846b29ed4728
Size

700KB
MD5

5419bc5a6b9f2ef55dd3846b29ed4728
SHA1

42b4458325884c7412d569e0475f3e8615958b87
SHA256

e2d068bb1ac39f62acf40bdd4366824a7e983d65052580852e30c1368dab465b
SHA512

7786b2660e53ae2fd8e592fa82787a05f3108f197b72d2af0916b00bac8b5b864d080d6e6d6b68f83f72134f84cce1151a6046b0f7e9d56bfa02fc6baf3e3299
SSDEEP

12288:7x1P3gwSnCDbEOh9URhdK3DTkhOHtggYt0o32IAr9b5znR:9p3y81hoKTRHtggw0xf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5419bc5a6b9f2ef55dd3846b29ed4728

Files

5419bc5a6b9f2ef55dd3846b29ed4728
.exe windows:4 windows x86 arch:x86

81ac5c839593bf826d55534271f17e3d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

waveOutUnprepareHeader

ws2_32

accept

rasapi32

RasHangUpA

user32

wsprintfA

gdi32

RectVisible

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

StgCreateDocfileOnILockBytes

oleaut32

SysAllocString

comctl32

ord17

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 690KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE