68b406e1c5c8da40bc412b4366234f64b0a92f213371d96ede83f47e412d050f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

68b406e1c5c8da40bc412b4366234f64b0a92f213371d96ede83f47e412d050f
Size

9.2MB
MD5

06f7fb4486f76898ec613a68b782cc3f
SHA1

177213b3e905eebd5a8547b94c37dd09729a301f
SHA256

68b406e1c5c8da40bc412b4366234f64b0a92f213371d96ede83f47e412d050f
SHA512

39d005253b7780cf0e43266aaa2f908d4356419204d46eecde0682c5179217d77ef612a91beef082838efa9fac0a0d3150b5bec12e2c59288486a8cdad3108cf
SSDEEP

196608:iYe4JB6Z5yf4Bchxwv0bIZjhnwLsS81rvhNeXTFRs61Ob1Mjcg0VMFzrgc13:iYPMzZ6YnejFR51AKc7MFfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
68b406e1c5c8da40bc412b4366234f64b0a92f213371d96ede83f47e412d050f

Files

68b406e1c5c8da40bc412b4366234f64b0a92f213371d96ede83f47e412d050f
.exe windows:5 windows x86 arch:x86

99f7cd8e1d401e1513cc4d7dd86e0b98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

user32

FrameRect

gdi32

CreateRectRgnIndirect

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

RegEnumKeyExA

shell32

SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathRemoveExtensionA

ole32

DoDragDrop

oleaut32

SysFreeString

oledlg

ord8

oleacc

LresultFromObject

gdiplus

GdipGetImageGraphicsContext

imm32

ImmGetOpenStatus

winmm

PlaySoundA

Sections

.text
Size: 9.2MB - Virtual size: 11.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE