b238ba95dc7b695873896e2ef68fedd9f37f5987581f3d4c76748c2288e907ac | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b238ba95dc7b695873896e2ef68fedd9f37f5987581f3d4c76748c2288e907ac
Size

13.4MB
MD5

ddf5712ee9037ea25d96dc9dc5c2fcb1
SHA1

cc44c055f9036c887fe7d78ec9de4cac60fa2515
SHA256

b238ba95dc7b695873896e2ef68fedd9f37f5987581f3d4c76748c2288e907ac
SHA512

760f6f24a43ce89fd07bc61837a6fbff750aa0c9db085f4f3c7e41b746c272c13ee4449a1d4d9670cf5155a34f4f790ae1bc5fae98e4b391e03cb6a735f9e6fc
SSDEEP

393216:ZoWJJ3q/D3XEM1EUbX/SyME4EVywyrsUhAh5+5m:ZRJJ3qL3LbWrEVQrAh5+5m

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b238ba95dc7b695873896e2ef68fedd9f37f5987581f3d4c76748c2288e907ac

Files

b238ba95dc7b695873896e2ef68fedd9f37f5987581f3d4c76748c2288e907ac
.exe windows:4 windows x86 arch:x86

07c1580933526cf3b0408b4dddf4f645

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

MultiByteToWideChar

user32

IsIconic

gdi32

ExtTextOutA

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

LoadTypeLi

comctl32

ord17

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 12.5MB - Virtual size: 12.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 976KB - Virtual size: 976KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ