e199e7fd7a2de9c1a47528f0cfe93b3d925479a58df6dbbfdb8f61b215637f0f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e199e7fd7a2de9c1a47528f0cfe93b3d925479a58df6dbbfdb8f61b215637f0f
Size

12.1MB
MD5

cfd34d76685c1dee64c7e6335cbe131f
SHA1

3043e27ae223b27c0de2e4bd94990a66b98cdbe9
SHA256

e199e7fd7a2de9c1a47528f0cfe93b3d925479a58df6dbbfdb8f61b215637f0f
SHA512

9211192ef489b4fe7ce6b5c6d3aaee258c84a65cc08882407406d700817d80e1ca91d44d4717a64ab483e20894148cd6eeec3b60fa209adec49f38aad9ae9201
SSDEEP

393216:97QNnRoTh866PA6kADje6MsHgJTh/1UtV1dxZx:97buxo6kADosHe9GtV13Zx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e199e7fd7a2de9c1a47528f0cfe93b3d925479a58df6dbbfdb8f61b215637f0f

Files

e199e7fd7a2de9c1a47528f0cfe93b3d925479a58df6dbbfdb8f61b215637f0f
.exe windows:4 windows x86 arch:x86

6e602d2879f1359b4f218fefb19e4593

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

MapDialogRect

gdi32

SetViewportExtEx

winmm

midiStreamRestart

winspool.drv

ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCreateKeyExA

shell32

Shell_NotifyIconA

ole32

CoTaskMemFree

oleaut32

VariantCopy

comctl32

ImageList_ReplaceIcon

oledlg

ord8

ws2_32

recv

Sections

.text
Size: 3.6MB - Virtual size: 24.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE