69763b8a0845d247b0d428307c5a3e1f8b85ed63fe168468758b84917ad0579a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

69763b8a0845d247b0d428307c5a3e1f8b85ed63fe168468758b84917ad0579a
Size

1.8MB
MD5

5ae85c865b4092ee7a51ecd3baa26ae6
SHA1

8bf2bc302fdbb82b8ca48d0c7d9733dca70cd8d1
SHA256

69763b8a0845d247b0d428307c5a3e1f8b85ed63fe168468758b84917ad0579a
SHA512

3c9043ec026aee0b07a81a1e0c593f44a3a0709ad8e05ba30be3aaff2e724830fdca1bcfb288fda2f566d46446f37d5ffea1fb42633ec17f4833867b5dfec1cc
SSDEEP

49152:/zYnUHXUHWp69qOluaUST70r1Mj0CCn1S42LTFTF5:MSQWp69VMSv0rMNCnI4WTF5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
69763b8a0845d247b0d428307c5a3e1f8b85ed63fe168468758b84917ad0579a

Files

69763b8a0845d247b0d428307c5a3e1f8b85ed63fe168468758b84917ad0579a
.exe windows:4 windows x86 arch:x86

01286a6486e431afaa6b7ae89b4353f4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToLocalFileTime

user32

CreateWindowExA

gdi32

GetDIBits

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegQueryValueA

shell32

ShellExecuteA

ole32

OleInitialize

oleaut32

VariantClear

comctl32

ImageList_GetImageInfo

ws2_32

closesocket

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 764KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1000KB - Virtual size: 1000KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ