13316882538c7b3a571dd905c9cc7fae99a0a945595ebc4fbdae2523d103941d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

13316882538c7b3a571dd905c9cc7fae99a0a945595ebc4fbdae2523d103941d
Size

8.7MB
MD5

8a9f31911a8e558eebd3a8fed34f939f
SHA1

b6a341521b7a2654a2bcf8d37c0142c0980fa550
SHA256

13316882538c7b3a571dd905c9cc7fae99a0a945595ebc4fbdae2523d103941d
SHA512

833e686906522e392a4cfb058689c151f3e43e3e3749870bdf16cf22bef60bac6841203c37fe1236cf0baa1d76c1c960b2e18927bbdb40b354b7dd4617cf3ccc
SSDEEP

196608:8Ye4GM/epsTbZAqb7ziPzT+f1iXICmt8SCAjAW2hq:8YTFZDfzi218ICmt8DE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
13316882538c7b3a571dd905c9cc7fae99a0a945595ebc4fbdae2523d103941d

Files

13316882538c7b3a571dd905c9cc7fae99a0a945595ebc4fbdae2523d103941d
.exe windows:5 windows x86 arch:x86

99f7cd8e1d401e1513cc4d7dd86e0b98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

FrameRect

gdi32

CreateRectRgnIndirect

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegEnumKeyExA

shell32

SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

ole32

DoDragDrop

oleaut32

SysFreeString

oledlg

ord8

oleacc

LresultFromObject

gdiplus

GdipGetImageGraphicsContext

imm32

ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 8.7MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE