fde81e929738224c62487abfb7ebcfed07bc4466cc269cbd138c2d62a76c26c1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fde81e929738224c62487abfb7ebcfed07bc4466cc269cbd138c2d62a76c26c1
Size

1.7MB
MD5

86e02a658d082fbcef191a81c3839d48
SHA1

f1520d87bf82eabb72d4798688a63a4fc3dc41b9
SHA256

fde81e929738224c62487abfb7ebcfed07bc4466cc269cbd138c2d62a76c26c1
SHA512

eba43e3c9d2bd8c104e5212fdc2c1936f38cfa2c71f3e1bbe007ff7a5428010692348959c36e97ea22e5a8bc57cd16138d6b4a1e288211d250ff30781decdc22
SSDEEP

49152:BYR3CJJek2C8pqVJF2H7KOTfU8dywZpsl:SRCJJekC8FGbo2HZpsl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fde81e929738224c62487abfb7ebcfed07bc4466cc269cbd138c2d62a76c26c1

Files

fde81e929738224c62487abfb7ebcfed07bc4466cc269cbd138c2d62a76c26c1
.exe windows:4 windows x86 arch:x86

f46fef2ad5c33ad8b8b92519fb6938ce

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSAAsyncSelect

kernel32

SetLastError

user32

IsIconic

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 700KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 976KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ