228845d3e1f4486974f1eee1e071e6de2321d39ecf7db28321c4eb0df1379db1 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

228845d3e1f4486974f1eee1e071e6de2321d39ecf7db28321c4eb0df1379db1
Size

7.2MB
MD5

c982ead01983710062886ec0fff00c0c
SHA1

cd8e4a45b8c6778cfd2a1cfa90faad3dc7b755bb
SHA256

228845d3e1f4486974f1eee1e071e6de2321d39ecf7db28321c4eb0df1379db1
SHA512

66f8fb132613ad6f3a5ef49bd85640630ffea9269cf2a026d5d6a0262e4d553917b5eb1555bab2efbf6aa987540d3f0aaf9cfe4f942f0b0a53ad0f3f02bc8c25
SSDEEP

196608:QcUWcJMKYXscO4lvA5VzeNMywdt01pTp6VrO9c:Qc/chcTHlojeNfhXp6VrO9c

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
228845d3e1f4486974f1eee1e071e6de2321d39ecf7db28321c4eb0df1379db1

Files

228845d3e1f4486974f1eee1e071e6de2321d39ecf7db28321c4eb0df1379db1
.exe windows:4 windows x86 arch:x86

c35d1fbc996e4096bb145070ac9ed52b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

midiStreamOut

ws2_32

WSACleanup

kernel32

SetLastError

user32

IsIconic

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseFontA

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

Sections

.text
Size: 6.0MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sedata
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 276KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ