8126f8e191698e4f2729bf85a3785beadc7b3b2a01d60ee5bdb573d12abcd4c7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

8126f8e191698e4f2729bf85a3785beadc7b3b2a01d60ee5bdb573d12abcd4c7
Size

12.1MB
MD5

b27b00a31f1ec19bd1333549934015aa
SHA1

939161044a806077f2b01a290e57905005ca2d0b
SHA256

8126f8e191698e4f2729bf85a3785beadc7b3b2a01d60ee5bdb573d12abcd4c7
SHA512

bb8631422090aa92a4337c345f3bf8a410bd7b0ce64f9453bec8068a421818513e3a95adc48578238b5555d8b8ed9a681118d92e657dca4cf49267c5e661dac1
SSDEEP

393216:0eEV4uXSPWqxMan1IqPzpgJr7NRmauL8:0A8qxMSIqPzM9EauL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8126f8e191698e4f2729bf85a3785beadc7b3b2a01d60ee5bdb573d12abcd4c7

Files

8126f8e191698e4f2729bf85a3785beadc7b3b2a01d60ee5bdb573d12abcd4c7
.exe windows:4 windows x86 arch:x86

cffb51ea53b69c4257b762efdd2281b7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

user32

GetClassInfoA

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

comdlg32

ChooseColorA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

SafeArrayDestroy

comctl32

ord17

Sections

.text
Size: 12.1MB - Virtual size: 15.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE