8f0d979e65ac00c002789f2a429e2ac2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8f0d979e65ac00c002789f2a429e2ac2
Size

896KB
MD5

8f0d979e65ac00c002789f2a429e2ac2
SHA1

0c153f05a783affc35b0d4cb47de203e28bc73f6
SHA256

adc1b98c292d08adbda224db2b915f1aec8a9f4834698bd5cca222356fb70acb
SHA512

af37ecb17d5ebc35f86a3fbee1c5d768eae7a51b4e7e2dbca0ee1aa99436ffe6a5358b8befb775bef007f4faad189d44a03a6cefea330017ec2569241293dd6e
SSDEEP

24576:55+bWXHFq5WINlfawCKpifrceKV0kSS5bXM81:ubWXlkWIN3KIeezJXh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8f0d979e65ac00c002789f2a429e2ac2

Files

8f0d979e65ac00c002789f2a429e2ac2
.exe windows:4 windows x86 arch:x86

1928d0e8cf34eb0a5d73797992dbaec4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wininet

InternetOpenW

user32

GetDC

gdi32

SaveDC

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW

advapi32

RegEnumKeyW

shell32

DragFinish

comctl32

ord17

oledlg

OleUIBusyW

ole32

CoInitialize

oleaut32

SysFreeString

shlwapi

PathIsURLW

Sections

.MPRESS1
Size: 823KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE