4f775be65b529aa91a83cf68556ee58bd4cf7398bdbcb032343b4a2a933088cc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4f775be65b529aa91a83cf68556ee58bd4cf7398bdbcb032343b4a2a933088cc
Size

8.0MB
MD5

4433a0f70876c35d7b46e896401d8ea2
SHA1

bdb8f79a28a914bcd40395048e849f9a135e1261
SHA256

4f775be65b529aa91a83cf68556ee58bd4cf7398bdbcb032343b4a2a933088cc
SHA512

055e5a44215d2dc1926f7fd49f8c1272711280af6d202a6c94c0057e5f1b1819a8f532737aeb850122b27a0d5328a7ac0fdcdfd06b0f680c7afd84b996f5c930
SSDEEP

196608:fY1fcxodH6P5WANkqthWNt9ZcRihkPhZsb81VWFJyD+CaG1KxVs1nwNg8p:fFudH6IxygHcRiSe81qCaG1qpBp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4f775be65b529aa91a83cf68556ee58bd4cf7398bdbcb032343b4a2a933088cc

Files

4f775be65b529aa91a83cf68556ee58bd4cf7398bdbcb032343b4a2a933088cc
.exe windows:5 windows x86 arch:x86

f90b3b8b491c48ca1f8e4661251dc515

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

LoadStringA

gdi32

SetViewportOrgEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantTimeToSystemTime

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.6MB - Virtual size: 24.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE