781796b05d0df1bc8c30ee0ec4f5d99a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

781796b05d0df1bc8c30ee0ec4f5d99a
Size

939KB
MD5

781796b05d0df1bc8c30ee0ec4f5d99a
SHA1

a5f3ba54b20292f885a445bb13d4fd5122b92aad
SHA256

ed7a7cda9d7635cc7947c802d601b1fddd6fd4b8f53d139a2dc2014d2e8ae099
SHA512

2a85ae676a9c5e59a88ac8d2ca4df445b1d52b3fbfb5700899eafad8fd0027dd8926040d7b2fa7e461dc787508f863bad821f9ff837cb336ea8cb4db3ffb38c5
SSDEEP

24576:CVfWf09LUPHqb71zYtEvTx9LryBbUmAUuMoG:ifWy4Hq31TvfLrMUGKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
781796b05d0df1bc8c30ee0ec4f5d99a

Files

781796b05d0df1bc8c30ee0ec4f5d99a
.exe windows:4 windows x86 arch:x86

72ee0489bc5f77225eb835bc6f612eae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetKeyboardType

advapi32

RegQueryValueExA

oleaut32

SysFreeString

version

VerQueryValueA

gdi32

UnrealizeObject

ole32

IsEqualGUID

comctl32

ImageList_SetIconSize

winspool.drv

OpenPrinterA

shell32

ShellExecuteExA

wininet

InternetSetOptionA

urlmon

CoInternetCreateZoneManager

comdlg32

PrintDlgA

winmm

timeGetTime

Sections

.PECO
Size: 460KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shrink
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 109B - Virtual size: 109B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ