a230a96f241ed247f79e154a2b3e11e11908391d0237bc04e97133f78ae8e40a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a230a96f241ed247f79e154a2b3e11e11908391d0237bc04e97133f78ae8e40a
Size

4.8MB
MD5

7dc407a12e5b47aa85ea57aa5df11863
SHA1

00d77974a8491af36d442f139e31215f2bafcb16
SHA256

a230a96f241ed247f79e154a2b3e11e11908391d0237bc04e97133f78ae8e40a
SHA512

b6945a351742331c2e5122285dca0b704f6a38349ecfb3c5fbc2f4c0626223a8a8813bf65715958d585804bc1c392b28057f27115afa887316d1cc0fdb196fd2
SSDEEP

98304:wVrIkdtNKh/NwEA6lmPx2Q+DP4YeCXz66/qlfMhdnusYFA0T6QP9NOW:wrIkdtIjwZGmpP+8YrklkLBYFA+ZNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a230a96f241ed247f79e154a2b3e11e11908391d0237bc04e97133f78ae8e40a

Files

a230a96f241ed247f79e154a2b3e11e11908391d0237bc04e97133f78ae8e40a
.exe windows:5 windows x86 arch:x86

6602214a09b1ca995b85d5ca07c13624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetVersionExA
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

user32

GetSubMenu

gdi32

CreateFontA

advapi32

RegSetValueExA

shlwapi

PathFileExistsA

wininet

InternetOpenUrlA

shell32

DragFinish

comctl32

ord17

winspool.drv

ClosePrinter

Sections

.text
Size: - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 593KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.9@]
Size: - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.U]-
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.?Xt
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ