d47d15e21a6fa740d58b503df9bc2380b1e204bccf2b40ef828a0f8f9dbb93f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d47d15e21a6fa740d58b503df9bc2380b1e204bccf2b40ef828a0f8f9dbb93f3
Size

13.9MB
MD5

7c519441dcd0e8f6e013154581865257
SHA1

f64a6bf928d2117f07c4007d5cc7a8ad0c444a01
SHA256

d47d15e21a6fa740d58b503df9bc2380b1e204bccf2b40ef828a0f8f9dbb93f3
SHA512

f95b361e4b5f7ec742296af1c664dcbd94f0f2288420ce67c4f73f671e75382e90c42b5d655e758318334ecb1ae332551290406e43d2b9ce357b6708f8c4b406
SSDEEP

393216:ykpxetWnGUzI+u4hJzs49zJUbN3i4Y0gLrzMlJXgtk:CcGBrsFsezJUlM7fMJQW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d47d15e21a6fa740d58b503df9bc2380b1e204bccf2b40ef828a0f8f9dbb93f3

Files

d47d15e21a6fa740d58b503df9bc2380b1e204bccf2b40ef828a0f8f9dbb93f3
.exe windows:4 windows x86 arch:x86

36e41590ecd1e511aee023b9100452e7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

rasapi32

RasHangUpA

winmm

waveOutOpen

ws2_32

select

user32

GetDC

gdi32

LineTo

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleRun

oleaut32

SafeArrayAccessData

comctl32

ord17

oledlg

ord8

wininet

InternetOpenA

comdlg32

ChooseColorA

Sections

.MPRESS1
Size: 1.1MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE