b92e6425b1a389df66b1ccdc834f5586 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b92e6425b1a389df66b1ccdc834f5586
Size

277KB
MD5

b92e6425b1a389df66b1ccdc834f5586
SHA1

bce8a2f5bd778b32bad504303caf5f7e3af48efb
SHA256

7cc3dd7d1e21060b69feb29e87927fcb82b230516b75b6ce732f01514417ea7b
SHA512

31ee990fd4f80fc19bd10faf44d23f590b31df24d07c3fe2102887ad511614007e5e16f07f63cdc519fbc5e7fb22d6ba6b1e2e346cc2853d9a3814f91e536d11
SSDEEP

6144:S+r6ZIcFNvMUPCXrp2BGAmxiUTqfH1kmfKsEp7izlNWhS:SGjcFFMUOpmmhmSs4s4g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92e6425b1a389df66b1ccdc834f5586

Files

b92e6425b1a389df66b1ccdc834f5586
.exe windows:4 windows x86 arch:x86

245f40180ae611c304a78cdc0df4d932

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
VirtualQuery
GlobalAddAtomW
WriteFile
RtlUnwind
SetEndOfFile
ExitProcess
ReadFile
GetCurrentProcess
GetOEMCP
EnumResourceNamesW
VirtualProtect
SetFilePointer
GetStringTypeExW
FlushFileBuffers
GetSystemInfo
HeapFree
FindAtomA

shlwapi

PathFindExtensionA
PathFindFileNameA

gdiplus

GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipGetImageWidth

setupapi

CM_Get_Depth
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

oleacc

CreateStdAccessibleObject
LresultFromObject

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Sections

.text
Size: 137KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 137KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ