c2a8351ba0397540adb63f404ae8bc4918db67d149f95243f35956557ee56fa3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2a8351ba0397540adb63f404ae8bc4918db67d149f95243f35956557ee56fa3
Size

1.9MB
MD5

6792b57eaaf4f11e0f103e4f1f2dc9e7
SHA1

5532aa20de90c8cddbf35b8c2a16b315f9a1b6b0
SHA256

c2a8351ba0397540adb63f404ae8bc4918db67d149f95243f35956557ee56fa3
SHA512

60472f2792cd1d70943033e8c5fe514dbd05860d3cb03e944234c055c36b41790a43b6490ec4c2e56449f4aca56eb94548e184303c8383720104d319ad6bde9c
SSDEEP

49152:1HOrB1IIqgMAWg7jKIfBul6qSlmsfQU5b7u4rRxV7/GupQXesjc:sI0MAWg7+qflsUpq4txV7xqXesjc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2a8351ba0397540adb63f404ae8bc4918db67d149f95243f35956557ee56fa3

Files

c2a8351ba0397540adb63f404ae8bc4918db67d149f95243f35956557ee56fa3
.exe windows:4 windows x86 arch:x86

72119038c83dbb5867efad6e7ece4696

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

htonl

kernel32

GetSystemDirectoryA

user32

GetActiveWindow

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegQueryValueExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 540KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ