54f7875971ad749612c98400d3182b41826cee6953fb45683dce1e074d767d3e | Triage

Sharing

General

Target

54f7875971ad749612c98400d3182b41826cee6953fb45683dce1e074d767d3e
Size

11.9MB
MD5

fdb4342e16709799f874040ce31637be
SHA1

9ad917c9c730045e1a963b9f86bbcde15c744890
SHA256

54f7875971ad749612c98400d3182b41826cee6953fb45683dce1e074d767d3e
SHA512

e2d8d3e31fb5177381a88731acb552724a6d30673d39cbf0b426c1cb16067d3295b7563c6c7076d6c4d712907576693a63f9bea9dfd9f6eb1c07c1f1733030d7
SSDEEP

98304:oNTArXJd8sHRzozoAagFyFO5ukPHD3449V17sTA8lXmspnSFZP:GAT8sHRzoz8gFy05ua849Dt8MspSb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54f7875971ad749612c98400d3182b41826cee6953fb45683dce1e074d767d3e

Files

54f7875971ad749612c98400d3182b41826cee6953fb45683dce1e074d767d3e
.exe windows:5 windows x86 arch:x86

a239ead75c10d98592cc7dde0ee466d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

winspool kernel32

DocumentPropertiesA �c�

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

oleaut32

SysFreeString

advapi32

RegQueryValueExA

user32

GetKeyboardType

gdi32

UnrealizeObject

version

VerQueryValueW

mpr

WNetGetConnectionA

ole32

CreateStreamOnHGlobal

comctl32

_TrackMouseEvent

shell32

ShellExecuteA

comdlg32

GetOpenFileNameA

wsock32

WSACleanup

gdiplus

GdipSetStringFormatLineAlign

Sections

.text
Size: 9.4MB - Virtual size: 9.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 14KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.1024
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ