d0c15873eab7a7b851d588c6856260fcfcc586d68a921321c8453867e2978780 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0c15873eab7a7b851d588c6856260fcfcc586d68a921321c8453867e2978780
Size

15.2MB
MD5

4728ae0dd338bdf92b579afb5bb21f18
SHA1

ecf0a80636f40ec77058f03a6ea15932f550319f
SHA256

d0c15873eab7a7b851d588c6856260fcfcc586d68a921321c8453867e2978780
SHA512

93d37df0ebf07ac4c8976778a23a402d23a73ee085265a7b82922100ce45bebdde70764ad6113a639320b49a406b2017c08a5890f5adfe2fcb60875c20f6e75b
SSDEEP

393216:bGoyREVdlIjyfOhPk2HW6GwdEymVf8JSu52wJ:bmEMBx26GwdHm9la

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d0c15873eab7a7b851d588c6856260fcfcc586d68a921321c8453867e2978780

Files

d0c15873eab7a7b851d588c6856260fcfcc586d68a921321c8453867e2978780
.exe windows:4 windows x86 arch:x86

a6c39ea1e771a0880244dc044e984a42

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

socket

rasapi32

RasHangUpA

user32

GetKeyState

gdi32

LineTo

msimg32

GradientFill

winspool.drv

DocumentPropertiesA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CoGetClassObject

oleaut32

SysAllocStringLen

comctl32

ImageList_Draw

oledlg

ord8

wininet

InternetCanonicalizeUrlA

comdlg32

ChooseColorA

Sections

.text
Size: 2.2MB - Virtual size: 11.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

b1da
Size: 93KB - Virtual size: 93KB