61fa65c3d42d52b00ceac7e153688018f7c1fb964ea2ae943b551122b2f4dd01 | Triage

Sharing

General

Target

61fa65c3d42d52b00ceac7e153688018f7c1fb964ea2ae943b551122b2f4dd01
Size

9.6MB
MD5

ef10c75949264e0903ef9611ec2355c0
SHA1

f04c647f420ca70e84cffdcb927341bb50dcc40f
SHA256

61fa65c3d42d52b00ceac7e153688018f7c1fb964ea2ae943b551122b2f4dd01
SHA512

01726189a05836eedb035127364a3792afd3e9180c997057126de13ea10ac9e1ac35d1579a89af1ac9de097b8f1a4de8d8e0ecc4c69a9bc0b487cf459634bf2c
SSDEEP

196608:GdD9hN99szOyQaZYOoOaWtxwE/bVfJViXh3PLAvanGCrG111GE71u:GV9b9yayQe9Da2HxJO30iGK6V1u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
61fa65c3d42d52b00ceac7e153688018f7c1fb964ea2ae943b551122b2f4dd01

Files

61fa65c3d42d52b00ceac7e153688018f7c1fb964ea2ae943b551122b2f4dd01
.exe windows:4 windows x86 arch:x86

c8055710bfd17954481d49f4c9f1cb66

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile

user32

wsprintfA

gdi32

SelectClipRgn

winmm

midiStreamRestart

winspool.drv

ClosePrinter

advapi32

RegCloseKey

shell32

ShellExecuteA

ole32

OleUninitialize

oleaut32

UnRegisterTypeLi

comctl32

ImageList_Destroy

ws2_32

recvfrom

comdlg32

GetFileTitleA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 8.6MB - Virtual size: 9.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 956KB - Virtual size: 956KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ