766caf6b22d86d5d748e52a2d8acc698e2c5645058e845a6d465abcdd14c8a0d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

766caf6b22d86d5d748e52a2d8acc698e2c5645058e845a6d465abcdd14c8a0d
Size

481KB
MD5

4bb64f1709b387ae5dddbca11a654e33
SHA1

5fb5498e1049ce532a5657f234f2155f37dbd509
SHA256

766caf6b22d86d5d748e52a2d8acc698e2c5645058e845a6d465abcdd14c8a0d
SHA512

c813c908aa712be1ec7a34f895db3be28162f9aee2506cd70db3f48cab7d9c5b6835553332ecceb74c2ae98aba9ad88f22582304f7b37fbdc3b8b54a8b943640
SSDEEP

12288:9PTveekpmU2GxQA5dZWkZK6nPqM+WcD4ellNrr/h:9I24QAhWhWMHD4MlNHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
766caf6b22d86d5d748e52a2d8acc698e2c5645058e845a6d465abcdd14c8a0d

Files

766caf6b22d86d5d748e52a2d8acc698e2c5645058e845a6d465abcdd14c8a0d
.exe windows:5 windows x86 arch:x86

5ee0d146292a4d3cd3e543dd755df065

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetWindowTextW

advapi32

RegQueryValueExW

shell32

ShellExecuteA

ws2_32

gethostbyaddr

iphlpapi

GetAdaptersInfo

wtsapi32

WTSRegisterSessionNotification

oleacc

LresultFromObject

gdi32

DeleteDC

winspool.drv

OpenPrinterW

oleaut32

VariantClear

Sections

.text
Size: 448KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE