396cf3b6a7f9be6d21242998966a97f7dd3549ca761437b73b9d0ffb7207739d | Triage

Sharing

Copy URL Twitter E-mail

General

Target

396cf3b6a7f9be6d21242998966a97f7dd3549ca761437b73b9d0ffb7207739d
Size

1.9MB
MD5

da1dd671e5f9601fb06422bcb9296597
SHA1

d36567c1fbc786a974ee4165543d48c81e265b2a
SHA256

396cf3b6a7f9be6d21242998966a97f7dd3549ca761437b73b9d0ffb7207739d
SHA512

901fae20c811095e022f5fd9b6c80f81a29e8dedcd6cd0a25fd0eae7f91a56bb7f3360d64d830320268cce81bd22935cc3b26c1eb3829ff38e43b4b473506347
SSDEEP

49152:8S8n/r7Aa84nWDSI+wf8wD5XVMeQl6HGpPszOByPh:8rsWZwlBVbw6eszDJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
396cf3b6a7f9be6d21242998966a97f7dd3549ca761437b73b9d0ffb7207739d

Files

396cf3b6a7f9be6d21242998966a97f7dd3549ca761437b73b9d0ffb7207739d
.exe windows:4 windows x86 arch:x86

4163abd7565d3c528a691ee5baf8d98b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

winmm

midiStreamOut

ws2_32

send

kernel32

SetLastError

user32

IsIconic

gdi32

GetViewportExtEx

winspool.drv

OpenPrinterA

advapi32

RegOpenKeyExA

shell32

ShellExecuteA

ole32

CLSIDFromProgID

oleaut32

UnRegisterTypeLi

comctl32

ImageList_GetImageCount

comdlg32

ChooseFontA

msvcrt

strncpy

psapi

GetMappedFileNameW

Sections

.text
Size: 868KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 1008KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sedata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ