f404ba12618aef9e5845152955ae4bbdc071008b51c485e484d82e0e4488a5fb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f404ba12618aef9e5845152955ae4bbdc071008b51c485e484d82e0e4488a5fb
Size

928KB
MD5

2e5bd4f1da069b377d0b5217b81b6fb2
SHA1

04118b713f70bcc446e61c5f7f7149edf0c32671
SHA256

f404ba12618aef9e5845152955ae4bbdc071008b51c485e484d82e0e4488a5fb
SHA512

8ba4db1be7e6270f5b8caae96646b79788f957581d33d0514d172e23f4bcaf60c1b3819cc797732bb5aa36980c2254b333bb0674d1335cd6b837437f19805b0f
SSDEEP

24576:9NoYMx2ZB8Xk61KmjBpVGE7EjwSM8AXjYRyfhfez:r1MKB8UyjsE7DlNMRywz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f404ba12618aef9e5845152955ae4bbdc071008b51c485e484d82e0e4488a5fb

Files

f404ba12618aef9e5845152955ae4bbdc071008b51c485e484d82e0e4488a5fb
.exe windows:4 windows x86 arch:x86

a900cce46c67759e2822a509e6acc601

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

SetParent

gdi32

EndDoc

comdlg32

GetOpenFileNameA

winspool.drv

EnumPrintersA

advapi32

RegSetValueExA

shell32

ExtractIconA

comctl32

ImageList_Draw

oledlg

ord8

ole32

OleLockRunning

olepro32

ord253

oleaut32

SysFreeString

wsock32

htons

Sections

.text
Size: 888KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 38KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE