e4ba890405512a33aeccce09444131babf421acb7f82d466d52bff879662df5e | Triage

Sharing

Copy URL Twitter E-mail

General

Target

e4ba890405512a33aeccce09444131babf421acb7f82d466d52bff879662df5e
Size

988KB
MD5

65be2de59ebfaaf366d6920feaaac7ba
SHA1

3b445064792e8bd21a47d3f5a8bf2e58f93cc3ca
SHA256

e4ba890405512a33aeccce09444131babf421acb7f82d466d52bff879662df5e
SHA512

267b392f4b822b709a3d36bd8a3852043fa794bf1f1d1003c03af780c804670b12bad9c890ec5e256c8048c52b6b8224f82602867f43beee96ac328b9774452d
SSDEEP

24576:YD4fXYIIOnNjRP1i3D6lSONtEUIg0cua1tWWWSe5YuRr3Z:YDXCX0uldVIg0cuKtWNSCY8Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e4ba890405512a33aeccce09444131babf421acb7f82d466d52bff879662df5e

Files

e4ba890405512a33aeccce09444131babf421acb7f82d466d52bff879662df5e
.exe windows:4 windows x86 arch:x86

ebd356d0171271caf8e7850b06514435

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LCMapStringA

user32

MessageBoxA

ws2_32

WSAStartup

gdi32

GetDeviceCaps

winspool.drv

DocumentPropertiesA

comctl32

ord17

shlwapi

PathFileExistsA

advapi32

RegCloseKey

msvcrt

strncpy

iphlpapi

GetInterfaceInfo

psapi

GetMappedFileNameW

shell32

SHGetFolderPathW

Sections

.text
Size: 100KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 872KB - Virtual size: 872KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ