8ec53e702b8bb3c3da7ceceb14c501bf | Triage

Sharing

General

Target

8ec53e702b8bb3c3da7ceceb14c501bf
Size

661KB
MD5

8ec53e702b8bb3c3da7ceceb14c501bf
SHA1

767656206195737252e8f11bd062e00e8577bc1f
SHA256

ee426002bc8cbdf883e09fdc595e5f2b3f3ba24a8d0d7db8d6cea925468fdc20
SHA512

baea150f7e370d53fc4d0b2bf607c549a221ced2b80c1937c635dfe7ef34db74ab7ab9d0288dfc9941789c062ec53a9afc5fa88b9d10dea944d73145b117632b
SSDEEP

12288:dyBC7gUC/h3fKp10rOHjIHvrIWEaPAudPXdAze5WZvIiPFMnDlLSwb37+y3l9C8z:m1/h3fKpOrpHviOVdPXdAze5WZQiKLtT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ec53e702b8bb3c3da7ceceb14c501bf

Files

8ec53e702b8bb3c3da7ceceb14c501bf
.exe windows:4 windows x86 arch:x86

5374ff4013c7f9957a3ebcfdb2a5452e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

GetMenuCheckMarkDimensions

gdi32

RectVisible

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegCreateKeyExA

shell32

ShellExecuteA

comctl32

ImageList_DrawEx

shlwapi

PathFindFileNameA

oledlg

ord8

ole32

CoTaskMemFree

oleaut32

SysAllocStringLen

rpcrt4

RpcStringFreeA

dbghelp

ImageDirectoryEntryToData

version

VerQueryValueA

wininet

InternetConnectA

iphlpapi

GetAdaptersInfo

Sections

.text
Size: 625KB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE