65cc3401eb8f494fe9b2a8fe0ced6594912cb4f15209789fe78a978d97b4d182 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65cc3401eb8f494fe9b2a8fe0ced6594912cb4f15209789fe78a978d97b4d182
Size

212KB
MD5

88a18bd68348d26cff48cf666291e97f
SHA1

45629775bfd5cfe7344022a3dd999807db823aac
SHA256

65cc3401eb8f494fe9b2a8fe0ced6594912cb4f15209789fe78a978d97b4d182
SHA512

7356b0d0ae4632019b8f84e8fff5c58d0dbc13d6a11fdd0ca0c6f6049e6298448834d2cb5ee5f21e39162b7204c777ac6a6db80f59d2281f9f857611cf85fd6e
SSDEEP

6144:ZR12bqa44rDZyKC56/At6rvpLPsWgV8aD:p2V44rtxYcAsrBLP3+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65cc3401eb8f494fe9b2a8fe0ced6594912cb4f15209789fe78a978d97b4d182

Files

65cc3401eb8f494fe9b2a8fe0ced6594912cb4f15209789fe78a978d97b4d182
.exe windows:5 windows x86 arch:x86

1f5d8be2b39f38265c23d37fec7c7faa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapWindowPoints

gdi32

SetViewportExtEx

advapi32

AdjustTokenPrivileges

shell32

ShellExecuteW

ws2_32

recv

oleacc

LresultFromObject

winspool.drv

DocumentPropertiesW

oleaut32

VariantClear

Sections

.text
Size: 182KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE