d6280262c32b545b8b86a862e7d07c34 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d6280262c32b545b8b86a862e7d07c34
Size

1.5MB
MD5

d6280262c32b545b8b86a862e7d07c34
SHA1

a85b9d4cb8f45d449cee5e99320adf9bb9115580
SHA256

e71bf4e293a0c59fafd124ff0f321c8cf53c5053411107170b9329b36a9da3b7
SHA512

f631448575ca11c975e6b98cd830e65239bbdc8821925ffd831e423b7b536bfe6e51b9b965cace1e49347aafa2a3291a829905db67af302e4836f78aa1cbd4d4
SSDEEP

24576:mezrxTcLR1aeLEY0X3mg105HkQKfIW4LC7tROUdgXXwQR/bB8Wy+BaVOkH1OmwCQ:7zSVUeQ1TUDO59RlivKKoVObq9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6280262c32b545b8b86a862e7d07c34

Files

d6280262c32b545b8b86a862e7d07c34
.exe windows:4 windows x86 arch:x86

64170384501f1235bea72ac14ecacb3b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

user32

GetMenu

gdi32

Escape

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

SHGetSpecialFolderPathA

ole32

CLSIDFromProgID

oleaut32

VariantChangeType

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: 1.5MB - Virtual size: 5.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE