0448a8a05f295b7e815f6c0c1935e436942c44050618363d06db3632c3a3de47 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

0448a8a05f295b7e815f6c0c1935e436942c44050618363d06db3632c3a3de47
Size

1.6MB
MD5

67ae383f241cfe35256ec7d5a724ec53
SHA1

2904ca6b66a901eeda71213c91e8fdb2fc504ac9
SHA256

0448a8a05f295b7e815f6c0c1935e436942c44050618363d06db3632c3a3de47
SHA512

48b219e925ac70f5bdbaf430e5ef856a1296806393dcc14f1be56154266d43b3904d4d564f339a72b7f9196a2f19c706719e93d98f05b08d414be8dcef6c985b
SSDEEP

49152:nogCV9200Bx6VOPkofDQGPR2FpA9ONuNudlHbDm7EV:nTCV9UOOP/M29MndlXmwV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0448a8a05f295b7e815f6c0c1935e436942c44050618363d06db3632c3a3de47

Files

0448a8a05f295b7e815f6c0c1935e436942c44050618363d06db3632c3a3de47
.exe windows:4 windows x86 arch:x86

107ff63f658d6feb25c073be45ea521d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime

user32

LoadIconA

gdi32

GetTextMetricsA

winmm

waveOutUnprepareHeader

winspool.drv

OpenPrinterA

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

CLSIDFromString

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

inet_ntoa

comdlg32

ChooseColorA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 628KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 980KB - Virtual size: 980KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ