6a8790f6005ed501cb015f82780b72e1a133c25a7e582eb420d772adf66dc0d7 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6a8790f6005ed501cb015f82780b72e1a133c25a7e582eb420d772adf66dc0d7
Size

4.7MB
MD5

bbf7b93003323b361d6626bf49be0fb3
SHA1

734ccaf95ed8ea7c2a07616bbe308db7b7f62d1c
SHA256

6a8790f6005ed501cb015f82780b72e1a133c25a7e582eb420d772adf66dc0d7
SHA512

e3b10e4b3aabb7fb9efa0340449de11e6512fcb7434a920ef9954476ed83e94bac6791a5a3b9ba202afca9d468ef8ddc1c77424da6e20a3be21d2255ef0ed574
SSDEEP

98304:3U1BdZnbLoj4k5NIe1EO0ls3lMuqUZIpr6sPP6dHzToTwkub/9ymA/PfrYzdE:3cBdhb2ZGmh0l+hNZIPmHPFAPfkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a8790f6005ed501cb015f82780b72e1a133c25a7e582eb420d772adf66dc0d7

Files

6a8790f6005ed501cb015f82780b72e1a133c25a7e582eb420d772adf66dc0d7
.exe windows:4 windows x86 arch:x86

af6bbc357646cd2f6855afed90b020c8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

winmm

midiStreamOut

ws2_32

WSACleanup

user32

GetMessagePos

gdi32

ExtSelectClipRgn

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

Shell_NotifyIconA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ord17

comdlg32

ChooseColorA

Sections

.text
Size: 4.7MB - Virtual size: 7.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE